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Is your data securely backed up 
when trouble strikes? 


If you’re responsible for protecting 

the data on your company’s network, 
backup solutions are just what 

you’ve been looking for. 


Arkeia’s new is 
specifically designed for businesses 
and enterprise departments which rely 
on local backups to a tape drive. 


After years of proven reliability, 

is an award- 
winning enterprise solution that 
provides fast and secure protection on 
tape or hard drive. 


Arkeia’s bare metal 

solution will completely 
restore a Linux client, as well as the 
backup server, even if the computer is 
stolen or totally destroyed. 


DB2 and MySQL 


Try Arkeia FREE fot 30 days! 

~ « The’best-way to know our 

* 4 solution isright for you? Try it’ 
~ “f At nocost! Wwe’ ove include 


Download the full featurred trial 
9 y 7 version at 


www.arkeia.com 
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ENTERPRISE BACKUP SULUTIONS: 


Over 100,000 installations worldwide rely on Arkeia for their data protection needs. 


©2004 Arkeia Corp. All rights reserved. Arkeia is a registered trademark of Arkeia Corp. All other trademarks and trade names are property of their respective owner. 


Cover Features 


Martin Howse probes the world of artist-developers working with self-coded audio apps 


“Paul Graham is a hacker, a painter, and a terrific writer. His lucid, humarous prose is brimming with 
contrarian insight and practical wisdom on writing great code at the intersection of art, science, and 
commerce” - Andy Herzfeld 


Features 


The palitical rift and fork of the XFree86 project has caused controversy in the Open Source community. 
Jono Bacon talks to the protagonists 


Conference report on the 2004 Ottawa Linux Symposium, combining a key technical conference 
with a taste of Canadian flair 


Linux drives Ferrari to the front of the grid - with a little help from Michael Schumacher, AMD, 
and the mechanies at Maranello 


Eighty per cent of the world's population still has to work many months or years to afford a computer 
that can run the majority of modern, apparently free, software applications. Frederick Noronha reports 
on the efforts of Free Software advocates to bridge the digital divide 


We explore the history and prospects of Helix and its potential as a cross-platform media player 

Gary V. Vaughan, author, scientist, programmer and martial arts practitioner, 

talks about life, Linux, and Free Software 

Alan Kay, the inventor of the Smalltalk pragramming lanquage, once said that “the best way to predict the 


future is to invent it". We explore the history of Smalltalk and object-oriented programming 


An exploration into the mystery that is the ancient computer of Anitkythera, lost at sea around 80 BC, 
and found by divers at the Seginning of the last century 


The Luddite is bored at work, plays Lieutenant Skat and reads the Good Soldier Svejk in between meals 
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As more public sector organisations 

consider the use of open source software 
and with a number of trials due to report back 
shortly, the next staging of the Electronic 
Government Exchange on 16" November 
2004 is themed around the issue of 

Open Source in the Public Sector. 


The objective is to share best practice; identify case 
studies; improve understanding of potential benefits and 
drawbacks; and, in the spirit of Open Source, encourage 
public sector collaboration. 


Issues to be addressed include: 


@ What is the experience in terms of measuring total 
cost of ownership in the complex IT environments 
of the public sector? 


@ What are the lessons learned from Linux 
implementations? 


@ What is the impact of Open Source on IT security? 


Speakers include representatives from: 

The Office of Government Commerce; Open Forum Europe; 
the UK Unix and Open Systems User Group; Nottingham City 
Council; London Borough of Waltham Forest; and 

Dundee City Council. 


Case Studies will be delivered from Central Scotland Police 
and Powys and Manchester focal education authorities. 
industry participants include speakers from IBM, Microsoft, 
Computacenter and Capgemini. 


Media Partners: 
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Online Registration and further information at www.linux-government.com 
or call 01883 344799 
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assurance arrives 


ith the ever increasing adoption of 

Linux-based systems in the 

enterprise, free software has 
appeared on the radar of companies offering 
protection from legal attacks. Open Source 
Risk Management recently launched a patent 
infringement insurance program for 
corporate Linux users, simultaneously 
announcing a patent review of the Linux 
kernel. OSRM patent lawyer Dan Ravicher is 
said to have checked the Linux kernel against 
all US software patents that have been 
upheld in court, and has asserted that none 
of these are infringed by the Linux kernel. 
However, Ravicher identified 283 existing US 
software patents which could potentially be 
used against Linux firms. 

Ravicher commented: “We confirmed what 
the community already knew; that Linux, like 
any other wildly successful product, has a 
patent risk. But, we also concluded that the 


& Debugging tool vendor American Arium 
has announced that it will offer support 
for headless embedded Linux system 
development on ARM and Intel XScale 
rocessors. The company’s hardware device 
allows developers to debug both the Linux 
kernel and applications with GDB on systems 
without serial or network ports, by using a JTAG 
interface. The complementary GUI-based 
SourcePoint application can emulate multiple 


consoles on the target device. 


Version 0.9.7 of Gnopernicus, the screen 

reader for the GNOME desktop, has been 
released. The program is designed to allow 
blind and visually impaired people to use free 
software, and offers users a choice of speech, 
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Linux patent risks are manageable because of 
the economies of scale achieved by bringing 
together large numbers of end-users through 
a structured program of insurance and loss- 
control. This patent risk is in line with what 
we expected to find, and likely comparable 
to the level of risk you would find in 
comparable proprietary software.” 

Ravicher found that about a third of the 
283 problematic patents are owned by large 
corporations with a financial interest in 
Linux, including Cisco, HP, iBM, Intel, Novell, 
Oracle, Red Hat and Sony, but that 27 of the 
patents are held by Microsoft. Since reform 
of the US patent system does not appear 
likely in the near future, OSRM plans to 
underwrite combined copyright and patent 
insurance for enterprise Linux users by the 
end of 2004. 

Linux distributor Red Hat has taken a 
different approach to litigation risk, 


braille or magnified graphical interface. 


Pen&internet has released riteForm f 
Linux, which the company claims is the 
first natural handwriting recognition application 
on the platform, Designed to process written 
forms entered on mobile devices, it can run 
cally on the client or on a server. It’s also 
claimed that the recognition engine does not 
require users to t their handwriting, and can 
deal with continuous script. riteForm is av 
as a one month free-as-in-beer evaluation 
version. 


rternet.caimn 


® Beta releases of the Mandrakelinux 10.1 


ble for download and 


testing. The first beta was based around Linux 


announcing a partnership with ‘intellectual 
property’ management tool vendor Black 
Duck Software. Part of Red Hat’s Open 
Source Assurance programme, Black Duck’s 
protexIP suite is an automated system 
designed to track software development. 
“Corporate developers of software and the 
attorneys who represent them are searching 
for ways to facilitate efficient identification 
and resolution of issues arising from the 
integration of intellectual property from 


multiple sources and compliance with 
potentially conflicting licensing obligations,” 
said Ira Heffan, of the law firm Testa, Hurwitz 
& Thibeault. The implementation of these 
business processes is critical to the wider 


adoption of open source software.” 


kernels 2.6.8 and 2.4.27 with glibc 2.3.3, X.org 
6.7.0, KDE 3.2.3 and GNOME 2.6.0 desktops, 
Mozilla 1.7 browser and OpenOffice.org 1.1.2. 


drakeli 0} beta.php3 


® aWiki is the collaborative editing 
software underlying Wikipedia, the 


free encyclopedia project, and several other 
sites. It is designed to handle a large number 
of users and pages without imposing too 
rigid a structure or workflow, and was 
recently released in a major new version with 
many novel features, 1.3.0. The 1.3.1 and 
1.3.2 bugfix releases followed rapidly; users 
of the 1.3 beta series are strongly 
recommended to upgrade to the latest 

n to fix a potential security hole. 


eforge.net 


MySQL AB has announced a partnership 

with managed hosting company 
Rackspace which will offer LAMP (Linux, 
Apache, MySQL, PHP/Perl/Python) servers with 
a 99.9 percent uptime guarantee, a commercial 
MySQL license and technical support. Aimed at 
developers of database-driven web applications, 
the platform uses a cluster of load balanced 
servers with automatic failover to increase 
reliability. Hosting is available at three levels, 
Starting at US$9.95 per month for SOMB 
webspace with a single database. 


The latest version of the cross-platform 

Open specification for 3D and 2D 
graphics has been announced by SGI and the 
OpenGL Architecture Review Board. OpenGL 


2.0 is designed to provide high-level access to 
the programmable features of graphics 
processors, and now incorporates the OpenGL 
Shading Language API. Potential applications 
for the enhanced standard include training and 
simulation interfaces, medical visualisation, 


product design and games. 


2» System builder Pogo Linux has launched a 
& notebook based around a 64-bit AMD mobile 
processor which comes preinstalled with either the 
SUSE or Fedora distributions running a 2.6 kernel. 
The KonaBook 3100 has a 15” XGA display with an 
embedded wireless chipset and DVD/CD-RW drive 
in addition to the usual notebook features. It’s 


available now with a starting price of US$2,299. 


Intended to offer a full composition and 


use classical notation, the Rosegarden 4 audio 


recording environment for musicians who 


and MIDI sequencer for Linux is free software 
released under the GNU GPL. The 0.9.9 beta 
release of Rosegarden 4 is said to be feature 
complete for the forthcoming 1.0 stable 
version, and so the final phase of testing is now 
under way. Potential users are encouraged to 
provide bug reports and other feedback via the 
project’s mailing lists and bug trackers. 


New Mexico Software has released a test 

version of a new Linux distribution aimed 
at users looking to migrate from Windows. 
Santa Fe Linux is based on Debian with the 
Crossover Office version of the WINE code, with 
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FANTASTIC OFFERS FR 


1&1's Microsoft and Linux Hosting 
packages offer you great flexibility. 
Whether you are a business or home 
user, 1&1 packages allow you to create, 
maintain and monitor your own unique 
website and e-mail. Plus Microsoft 
package prices are slashed to the low 
Linux prices. 


Member of 


united) 


internet 
oe 


As well as FREE FrontPage 2003 software 
with all Microsoft packages, all Linux 
and Microsoft Hosting packages bundle 
£400 worth of FREE software. This 
includes award-winning NetObjects 
Fusion 7.5, Photolmpact 8 SE and 
more. Plus website optimisation tools 
within your 1&1 Control Panel. 
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In order to offer the most competitive 
packages, 1&1 has boosted core 
package features by up to 50%. Traffic 
allowance in the Business package is 
now 20 GB/month and web space is a 
massive 2 GB. And with no set-up fee, 
1&1's packages offer great value for 
money. 


5 Microsoft Office 


“FrontPage 2003 


cat 08708 503305 


£599 


Sub-domains 
Full DNS Management 


Web space 

FTP Access Account 

Monthly traffic included 
Protected by up-to-date Firewall 
Daily backups 


WebsiteCreator 

Full Version Software worth £400 
FrontPage 2003 software inc. 
New 1&1 Control Panel 


POP3 e-mail accounts 
Autoresponders included 
E-mail aliases 

New 1&1 Webmail 

Virus Scanning for Account 
Newsletter Tool 


Ready-to-run CGl Library 
PHP4 

ASP Scripting Supported 
FrontPage 98/00/02 Extensions 
Password Protection 

Raw Logfiles 


1&1 WebStatistics 
1&1 WebElements 


Free Express Support 
Technical E-mail Support 
Comprehensive FAQ's 
Step-by-step online quides 
Online account management 
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— Linux packages 


or visit US now 


£9-95 


Sub-domains 
Full DNS Management 


Web space 
FTP Access Accounts 
Monthly traffic included 


Protected by up-to-date 
Firewall 


Daily backups 


Shared SSL or optional own 
SSL Certificate 


Password protection 


WebsiteCreator 

Full Version Software worth £400 
FrontPage 2003 software inc. 
New 1&1 Control Panel - 


POP3 e-mail accounts 
Autoresponders included 
E-mail aliases 

New 1&1 Webmail 

Virus Scanning for Account 
Newsletter Tool 


Access Database supported 
My SQL Database 
Ready-to-run CGI Library 
PHP4, Perl & Free CGI 

ASP Scripting Supported 
ASP.NET & .NET Framework 
FrontPage 98/00/02 Extensions 
Password Protection 

Raw Logfiles 

SSI 


In2Site Dialogue 

1&1 WebStatistics 
1&1 WebElements 
1&1 WebDatabase 
Chat Channels 
Custemisable Forums 


Free Express Support 
Technical E-mail Support 
Comprehensive FAQ’s 
Step-by-step online guides 
Online account management 


Total price per month + VAT. 
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£4999 


Sub-domains 
Full DNS Management 


Web space 

FTP Access Accounts 

Monthly traffic included 
Protected by up-to-date Firewall 
Daily backups 

Own SSL Certificate 

SSH Access 

Password protection 


WebsiteCreator 

Full Version Software worth £400 
FrontPage 2003 software inc. 
New 1&1 Control Panel 


POP3 e-mail accounts 
Autoresponders included 
Uniimited e-mail aliases 
New 1&1 Webmail 

Virus Scanning for Account 
Newsletter Tool 


Access Database supported 
My SQL Database 

MS SQL Database 

SQL Import 

Ready-to-run CGl Library 
PHP4, Perl & Free CGI 

ASP Scripting Supported 
ASP.NET & .NET Framework 
FrontPage 98/00/02 Extensions 
Password Protection 

Raw Loofiles 

SSI 


In2Site Dialogue 

1&1 WebStatistics 
1&1 WebElements 
1&1 WebDatabase 
Chat Channels 
Customisable Forums 
Cron Jobs 


Free 0800 Emergency Support 
Technical E-mail Support 
Comprehensive FAQ's 
Step-by-step online quides 
Online account management 
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CA launches 
Ingres 
migration 
contest 


omputer Associates has made the source code of its Ingres r3 database available under the CA 


Trusted Open Source License. CA hopes that the software development community will review 


and submit modifications to the Ingres code for potential inclusion in the official release. The 
company will offer commercial support for Ingres r3, including indemnification, as an optional extra. 


Ingres r3 supports high availability clustering with failover on commodity hardware, and parallel 
query processing across computing resources in the cluster. It offers on-line table and index 
reorganisation which allows maintenance to be performed while the database remains in production, 
and a number of 64-bit features including addressability of 64-bit file systems and a 64-bit cache. It 
also supports Unicode for international compatibility. 


At the same time as the source release, CA announced the Ingres MI 


n Dollar Challenge, designed 
to encourage the development of migration toolkits for the database. Open source developers are 
invited to create solutions that enable users of Oracle, Microsoft SQL Server, Sybase Adaptive Enterprise 
Server, IBM DB2, Informix or MySQL to migrate to the Ingres r3 database platform. Qualifying 
solutions will be eligible for cash awards of up to US$400,000 aut of a total of US$1 million. 

“CA's Ingres Million Dollar Challenge underscores our commitment to creating an optimal working 
relationship between ourselves and the open source community,” said Mark Barrenechea of CA. “This 
relationship benefits CA and our customers by allowing us to leverage the cumulative talent of the 


community, while generating significant opportunities for open source developers around the world.” 
Submissions will be accepted until the beginning of February 2005, and the competition is open to 
residents of the UK, USA, Canada, Mexico, India, China, Australia and New Zealand. 
ca.com/opensource ca.com/ingres/challenge 


the beta currently available as a bootable ‘live’ nched 
CD. Crossover Office w 
run Windows versions of Microsoft Offi 
Adobe Photoshop, Lotus Note 


Explorer and now Apple iTunes as well, it seems. 


w Santa Fe users to 


ternet A new version of Speex, the free software 


codec for voice applications, was recently 


released, Speex is designed to compress voice at 


bitrates ranging from 2 to 44 kbps, with 


@ The Scribus development team has e bitrate encoding and multiple sample 


announced the first release candidate rates in the same bitstream available. It also 


for version 1.2 of their DTP and layout offers intensity stereo encoding, packet loss 


program for Linux. Major improvements concealment and voice activity detection. 
include a new story editor, several new Version 1.1.6 has an improved echo cancellation 
plugins and an enhanced PDF exporter with feature, on which user feedback is requested. 
advanced features. A new print previewer has g : 

the ability to render CMYK separations on 
screen, and the text frames are also said to be 2m A test release of the UserLinux 
improved. Scribus is already being used in distribution, originally proposed by 


commercial publishing houses, including a uce Perens, is now available as a 3 
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The Mozilla Security Bug Bounty Programme has 
been announced by the Mozilla Foundation, in 
which users who identify and report genuine 
security holes in the free software browser will 
collect a US$500 cash prize. The programme is 
being funded initially by Linux distributor Linspire 
and Mark Shuttleworth, the founder of digital 
certificate company Thawte. 

“As Mozilla software builds momentum in the 
marketplace, I'm inspired by the Mozilla 
Foundation’s enduring commitment to 
transparency and responsiveness on security issues” 
commented Mark Shuttleworth, Mitchell Baker, 
president of the Mozilla Foundation, added: “While 
ho software is immune from security vulnerabilities, 
bugs in open source projects are often identified 
and fixed more quickly, The Security Bug Bounty 
Program will help us unearth security issues earlier, 


allowing our supporters te provide us with a head 
start on correcting vulnerabilities before they are 
exploited by malicious hackers.” 

Users who identify security bugs in Mozilla are 
encouraged to visit the project's website, which has 
information on eligibility and how to claim the 
bounty. The Mozilla Foundation is aiso inviting 
Mozilla users and supporters to make tax- 
deductible donations to the bounty fund. 


BB The Mozilla Foundation is collaborating with 
Novell and IBM to implement the World Wide 
Web Consortium’s XForms 1.0 recommendation 
in its browser. The forms module in XHTML 2, 
developed by the W3C, XForms 1.0 uses XML to 
increase the accessibility of web transactions. 


bootable CD image which can download 
selected subsets of Debian packages from 
mirror sites. The UserLinux project is now 
looking for service partners to establish a 
global commercial support network, 
including support for a pure x86_64 version 
of Debian with an i386 chroot for 32-bit 


@ YaPIDE, or Yet Another PIC IDE, is a 
GUI-based microchip PIC simulator for 


Linux. The ir 
16F628, and can simulate at 


al 0.1 release supports the PIC 
to 60MHz on 
a reasonably fast host. The GUI features a 
source code editor with syntax highlighting, 
breakpoints and memory inspection through 


tooltips. YaPIDE is free software released 


Chinese base 


he Open Source Development Labs 

consortium, made up of leading Linux 

companies, has announced that it will 
open its first office in B 


ng, China, The move 
follows the Chinese government's pledge to 
work with OSDL on Linux initiatives, “We 
recognise that Linux marks a great opportunity 
for the expansion of the software industry in 
China,” said Ding Wen Wu from China’s 
Ministry of Information Industry. “The Chinese 
government consistently drives progress and 
the advanced use of Linux. OSDL's initiatives for 


accelerating the adoption of Linux in enterprise 
computing have garnered worldwide support, 
and we are committed to advancing Linux 


together with OSDL.” 

CCID Consulting, a Chinese IT research firm, 
has estimated that the Linux server software 
market in China will have a compound annual 
growth rate of 49.3 percent over the next five 
years. “China is a leader in embracing Linux,” 
said Stuart Cohen, CEO of OSDL. “The 
government is promoting Linux, a vibrant local 
software industry is blossoming around it, and 
the world’s leading IT firms are investing heavily 
to deliver Linux-based computing solutions to 
Chinese customers.” 

OSDL already works closely with the Chinese 
Ministry of Information Industry and the 
Ministry of Science and Technology, and has 


existing members including the Beijing Co- 
Create Open Source Software Company and the 
Beijing Software Testing Centre. The new OSDL 
office in Beijing will be the third base for the 
organisation, following the opening of offices in 
the US and Japan. 


i OSDL has announced a major upgrade of its 
Scalable Test Platform services for the Linux 
kernel. STP provides a set of test suites on a 
wide range of hardware platforms for validating 
changes to code in the kernel, automatically 
tracking performance and stability. Version 3.0 
is available free of charge to qualified developers 
through the OSDL website at www.osdl.org 
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Wyse to launch Linux 2.6 thin client 


yse has announced that its 5150SE thin 

client, powered by a fanless 4OOMHz 

AMD Geode processor, will be available 
in the fourth quarter of this year. Wyse believes 
that Linux-based systems represent the fastest 
growing portion of the thin-client market, with a 
market share already over 20% worldwide. “The 
Wyse thin client is helping advance the overall 
movement of Linux to the desktop,” said Mike 
DeNeffe, for the company. “We're addressing the 
growing need in organisations to embrace the 
advantages of Linux as a desktop alternative.” 

The 5150SE uses a read-only filesystem and 

has no moving parts. It features both USB and 


under the GNU GPL 


www.mtoussaint.d 


he PostgreSQL Global Development 
‘& Group has announced that version 8.0.0 
of the database is now ready for public testing. 
The jump in version number is due to the 
inclusion of several major new features, and so 
the developers are hoping for the widest 
possible bug-hunting effort before a productio 
release. The beta versions are available for 
download at: 


tml 


@ inux service companies Progeny and 
Open Country have announced a 
partnership which w ow customers to 


update the legacy Red Hat distribution versions 
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legacy |/O ports, and comes bundled with the 
Wyse Rapport management tool. The embedded 
Linux system is based on a 2.6 kernel and 
optionally supports a local Mozilla browser as 
well as the ICA and RDP protocols, Wyse is 
joining the Open Source Development Labs 
consortium, where it will participate in OSDL's 
Linux desktop steering committee. “We look 
forward to building upon our relationship with 
OSDL, as the center-of-gravity for the Linux 
industry, to support and foster the growth of 
desktop Linux and server-based technologies” 
added DeNeffe. 

www.wyse.com 


7.x, 8.x and 9 
Open Country‘’s OC-Manager system 


Progeny’s se le using 
administration tool for software management, 
backup and restore, and remote desktop 
sharing. Red Hat discontinued commerci 
support for these widely-deployed distributions 
when it reorganised its product line around the 
Red Hat Enterprise offerings. 


opencountry.com 


(a China's Red Flag Software has released a 
version of its Linux distribution, Red Flag 


Server 4.1, built with the proprietary Intel C++ 
Compiler 8.0. Red Flag includes 60-day 
evaluation copies of the compiler in the 
distribution to enable customers to optimise 
their own applications for Intel processors. 


apparently unique approach would seem to 


The Wyse ‘Winterm’ will soon be available with Linux 2.6 inside 


indicate a very relaxed attitude to free software 
issues - it’s only a matter of time before 
someone at Red Flag gets a haughty email from 
Richard Stallman. 


un has previewed a new feature of its 

proprietary UNIX flavour, in Solaris 10. 

Codenamed Project Janus, it is designed 
to offer binary compati 


Linux applications, specifically 100% 
compatibility with the Red Hat Enterprise Linux 
3 distribution. A complete list of tested Linux 
applications will be available when Solaris 10 is 
released later this year. 


The move is intended to allow Solaris sites 
to run binary-only proprietary software for 
Linux such as Acrobat Reader or Oracle, as 


bows 


Linux installations rise and the market for 
third-party applications on incompatible 
UNIX forks declines. Project Janus means that 
Solaris users will now be able to run these 
Linux applications without investing in 
duplicate hardware. John Loiacono of Sun 
commented “Our strategy has always been 
to provide the very best interoperability for 
heterogeneous environments. There is no 
longer a reason to make sacrifices when 
choosing between Linux and Solaris.” 

Sun hopes that Project Janus will offer IT 


to 


managers greater efficiency through a more 
interoperable Solaris and Linux environment, 
and claims that developers will be able to use 
a single workstation or server to develop, 
test, and deploy for both platforms. When 
used with Sun’s N1 Grid Container software, 
Solaris 10 will enable the creation of a virtual 
Linux environment, isolating Linux 
applications from the host system. 
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@ News 


HP launches new 
Linux hardware 


P used the LinuxWorld trade show in 

San Francisco to launch a wide range of 

hardware designed for Linux, from thin 
clients and laptops all the way up to 
Superdome servers. 

The t5515 Linux-based thin client sells for 
US$349 and features an 800MHz Transmeta 
Crusoe processor, 64MB RAM, 32MB flash 
storage, an ATI Radeon 7000-M graphics chip 
with 16MB video memory, four USB ports and 
an optional PCI slot. The t5515 is also available 
with 128MB RAM, 128MB Flash and the Mozilla 
browser preloaded for around US$439. Both 
versions are bundled with Altiris Deployment 
Solution, management software for remote 
deployment and update. The nx5000 notebook 
comes with Novell’s SUSE Linux and 
OpenOffice.org pre-installed; it has a CD-R/RW/ 
DVD drive, wireless LAN and Bluetooth 
networking, and full HP support. The nx5000 
starts at around US$1,140. 

HP now offers full Linux support across the 


Unisys enters the Linux business 
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entire Integrity family of servers and 
StorageWorks products, as well as Linux 
consulting and integration services. HP’s Linux 
Reference Architecture stack is based on Oracle 
Real Application Clusters, BEA WebLogic Server 
and open source middleware based on MySQL, 
JBoss, Apache and QpenLDAP. The company 
now claims 6,500 Linux service staff worldwide, 
and has launched a Sun Solaris to Linux 
migration programme for ISV’s in targeted 
vertical industries, including financial services 
and telecommunications. 

HP has also announced strategic deals with 
Red Hat and BEA. The ‘Linux Elite’ partner 
programme allows HP customers access to the 
Red Hat support knowledge base, online 
training and other benefits. The company is also 
supporting BEA’s Beehive initiative, which will 
release the framework and runtime from its 
WebLogic Workshop Java development tool as 
open source. 
www.hp.com 


nisys has announced that it will be 

working with Novell and Red Hat to 

offer Linux on its Intel-based servers. The 
company is claiming an industry first on this 
class of machine, true dynamic partitioning; the 
ability to transfer processing resources 
automatically to the applications that need it 
most. “Our enterprise customers are demanding 
industrial-strength Linux solutions, and we are 
responding” said Unisys president, Joe McGrath. 
The entire range of Unisys ES7000 servers, from 
4-way to 32-way SMP with both 32-bit and 64- 
bit processors, is now available with Linux. 

The company is positioning the Linux servers 

as a direct replacement for Sun’s RISC-based 
machines running Solaris. Richard Dracott of 


Intel commented: “Unisys, long a price/ 


performance leader in high-end Intel processor- 
based systems, is continuing this trend by 
bringing true enterprise class functionality to 
the Linux environment, to large scale 
multiprocessing systems based on both Xeon 
MP and Itanium 2 processors.” 

In tandem with the Linux hardware offering, 
Unisys has now enabled its Server Sentinel 
software to manage both Windows and Linux 
environments from a single machine. Among 
the first Linux customers for Unisys are 
Pennsylvania State University and a state 
government agency in Florida, USA. The 
company has also sold a Linux system to Policia 
Investigaciones de Chile, the Chilean equivalent 
of the FBI. 

WwW.unisys.com 


1}th Annual Tel/Tk Conference 
13-15 October, New Orleans, USA 


LinuxWorld Conference & Expo 
6-7 October, London, UK 


www.phpconference.de 


ApacheCoan US 2004 
13-17 November, Las Vegas, USA 


www.tcl. th/community/tcl2004/ 


Sixth International Conference on 
information and Communications Security 
27-29 October, Malaga, Spain 


www, linuxwerkdexpo.co.uk 


Linux Lunacy/Perl Whirl/MySQL Swell 


10-17 Octaber, Mediterranean sea icics04.leccuma.es 


apachecan.com 


18th Large installation System 
Administration Conference 
14-19 November, Atlanta, USA 


International PHP Conference 2004 
7-10 November, Frankfurt, Germany 


www.geekcruises.com 


www.usenix.org/events/lisa04/ 


THE TERAVAULT STORAGE SERVERS from Digital 
Networks provide complete networked storage of up to 
9600GB in size. 


Linux servers have previously been limited to 2.0TB 
filesystems. The Teravault RS5240-64, pictured right, 
features 64-bit AMD Opteron processors and a 2.6 
kernel based 64-bit Linux distribution to overcome the 
2.0TB filesystem limit. 9600GB in raw storage equates 
to approximately 8800GB available to the network - on 
one filesystem. 


The Teravault RS5240-64 also features multiple Gigabit 
Ethernet interfaces. Linux, UNIX, Windows and Apple 
clients are supported, and the system can be 
administered remotely with the included web based 
interface or by SSH. 


From now on network attached storage needn't cost an 
arm and a leg. For details, visit www.dnuk.com 


Q Digital Networks 


United Kingdom 


www.dnuk.com 
sales@dnuk.com 
0161 337 8555 


| Session Edit View Bookmarks Settings Help 


Teravault RS5240-64 


* 9600GB RAID storage and LVM2 

* Dual 64-bit PCI-X hardware RAID controllers 

* Single or dual 64-bit AMD Opteron processors 
* Up to 16.0GB of RAM 

* 2.6 kernel based 64-bit Linux distribution 


From £13,999 + VAT (storage servers from £2200) 


@ Free Software Matters 


Patent Defence 


s | wrote last time, this summer is seeing another round of concerns 

about the vulnerability of free software to patent infringement 

claims. But the free world is assembling the machinery with which to 
meet the risks posed by patents on software inventions. Rapid developments 
are occurring in the area, so it can be hard to interpret what the news 
means. In the last few weeks, for example, part of the solution has widely 
been reported on as though it were part of the problem. 

One difficulty that patents create for everyone who makes software, 
whether proprietary or free, is that it’s impossible for a working engineer 
or programmer to have any idea whether her work infringes an existing 
patent. Patent searching is exceedingly expensive. Patent lawyers and 
agents have an incentive to make the claims in their patent applications as 


broad and as obscure as possible, right up to the limit the patent examiner 
will tolerate. Patent law does not require parties to conduct a search in 
order to avoid unintentional infringement. 
Moreover, because patent law in most countries 
provides heightened damages for “knowing” or 
“intentional” infringement, most large 
organizations would prefer to rely on patent- 
holders to inform them of any unintentional 
infringement, and then to negotiate over 
royalties or cross-licenses. 

But the free software world cannot so easily 
ignore patent dangers. Upstream suppliers of 
software that can be freely copied, modified, 
and redistributed by downstream users are 
justifiably worried about their potential liability 
for passing along infringing software, as well as 
by their ethical obligation to offer people 
software that is as free as it looks. Large-volume 
enterprise users of free software - who are 
accustomed to bargaining for indemnity 


provisions in their software acquisition agreements with commercial 
software suppliers - would like to be able to insure against patent 


infringement risks. And everyone is aware of the monopo 


intensely 
concerned that it may try to rescue its increasingly untenable commercial 
position by using threats of patent infringement litigation to block the 
advance of free software. 


Patent lawyers and agents 
have an incentive to make 
the claims in their patent 
applications as broad and as 
obscure as possible 


So building a patent defence strategy requires some effort to 
understand the scope of the risks. Open Source Risk Management 
(OSRM), a fledgling provider of insurance and indemnity for enterprise 
users of free software, recently announced the summary conclusions of a 
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study conducted by my colleague Daniel Ravicher that identified more 
than two hundred US patents, including more than two dozen held by 
Microsoft, that might read on the Linux kernel. 

This announcement was rapidly translated by the trade press into 
“Linux may infringe hundreds of patents.” But this fundamentally 
misunderstood what the value of the exercise, and the news, was. OSRM 
has not released the details of the study, but Ravicher’s awn public 
statements make clear several very important points that were often 
missed in the coverage. First, not one of the patents the study identified 
was a patent that had been held valid in the US courts. At least one of the 
identified patents held by Microsoft is already under reexamination by the 
US Patent Office, as the result of a petition for reexamination filed by 
Ravicher himself through the Public Patent Foundation. Ravicher, who in 
conducting his study had only the assistance of one law student working over 
several months, was not attempting to determine 
whether Linux infringed any of the identified 
patents. That would be a complex and time- 
consuming inquiry for fifty patent lawyers. The 
goal of the study was to establish the scale of the 
risks against which an insurer, in the worst case, 
might be required to indemnify policyholders. It 
therefore identified patents one or more of whose 
claims, if valid, might be practiced by a Linux-like 
operating system kernel, solely by reference to the 
published claims themselves, without actually 
determining whether the existing kernel code 
actually practices those claims. 

The OSRM study, which concerned only one 
free software program among thousands, does, 
however, establish an important baseline. 
Insurers like OSRM will undoubtedly refine their 
internal estimates of patent risk as to many free 
software programs In coming months, but already they can begin to 
determine the appropriate scale of premiums. As they announce 
affordable patent infringement coverage for business users, those users 


be able to continue their ongoing large-scale adoption efforts with 
additional confidence. 

The study is also a necessary part of our reconnaissance effort in building 
the free world’s patent defence strategy. As one stage in that process, 
approximate assessments of the possible patent interactions of a full range 
of free software programs are being conducted. Those efforts will identify 
some invalid patents dangerous to the freedom of free software, against 
which legal action can be taken by the Public Patent Foundation. They will 
help us to map the landscape faced by particular development teams in the 
near future, guiding free software in directions that avoid potential conflicts 
with patents held by hostile hands. Whether the bluster from the monopoly 


this summer has been an actual warning of impending hostilities, or just 
another round of expensive bluff, every day that passes finds us more 


equipped to defend the freedom of free software. 


Eben Moglen is professor of law at Columbia University Law School. He serves 
without fee as General Counsel of the Free Software Foundation. You can read 
more of his writing at /moglen.law.columbia.edu 
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@ Freestyle 


Eat the document 


ore often than not, documentation is an afterthought, and is what 

happens when the interesting bits of a software project are over 

and done. And the coder is not always the best person for the job, 
if only because, as Richard Stallman says, “writing good English is a rare skill 
among programmers", because most can’t spell, and many will tend to 
ignore the simple instructions that are the starting point for less informed 
users, and because “it’s obvious, innit?”, as one socially challenged 
programmer | knew, with a high regard for his own abilities, wrote as the 
header of a particularly badly written piece of code. Code that isn’t 
documented is like the difference between the live and the undead. 

For this reason, Free Software projects are always in need of volunteers 
to enhance and maintain the wealth of Linux and Free Software user 
documentation that is distriouted around the Net. 

In his piece, ‘Cathedrals, Bazaars and the 
Town Council’, Alan Cox, who is still one of the 
most highly regarded of Linux kernel 
developers, despite his current sabbatical, took a 
stab at some of the failings of Free Software 
projects, and some of the individuals who 
involve themselves in discussions around the 
kernel and other software matters, “the 
wannabe real programmers” who are “good at 
having opinions ... catch buzzword disease,” or 
have some speciality they consider the “one 
true path.” Cox points out that coders are not 
the only contributors to a successful project, 
and that success often depends on others: “1 
find it sad that many people when asked to 
name the most important five Linux kernel 
people rarely name some of the most important 
folk of all - those who maintain websites, 
change logs, mailing lists and documentation ... Linus says ‘Show me the 
code’, That is a narrow view of a real project. When you hear ‘I'd love to 


“Once you realise that 
documentation should be 
laughed at, peed upon, put 
on fire, and just ridiculed in 
general, THEN, and only then, 
have you reached the level 
where you can Safely read it 
and try to use it to actually 
implement a driver” 

- Linus Torvalds 
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help but | can’t program’, you hear a documenter. When they say ‘But 
English is not my first language’ you have a documenter and a translator 
for another language.” As Cox suggests, Torvalds takes a more sceptical 
stance and leaves the worrying about the ins and outs of documentation 
to other people. Addressing André Hedrick on the kernel mailing list, 12 
January 2001, Torvalds, who often makes sweeping verbal gestures with 
his tongue stuck firmly in his cheek, declared that: “ANYBODY who does 
driver development without taking the real world into account is a 
dangerous person. Stacks of papers, diagrams and rules are absolutely 
worthless if you can’t just understand the fact that documentation is 
nothing more than a guide-line ... Once you realise that documentation 
should be laughed at, peed upon, put on fire, and just ridiculed in general, 
THEN, and only then, have you reached the level where you can safely 
read it and try to use it to actually implement a 
driver.” This, of course, is an honest 
programmer's view of the world, sceptical of 
the supposed virtues of bureaucracy, and 
recognising that documentation suffers bugs 
and errors just like the bugs and errors that 
afflict both good and bad code. Torvalds 
concluded with the scathing disrnissal: “I’m 
continually amazed and absolutely scared silly 
by your blind trust in paperwork, whether it be 
standards or committees or vendor 
documentation.” 

Linux is a child of the Internet, and there are 
a million or more resources across the Net, 
websites for every aspect of Linux hardware and 
software developnent, the excellent developer 
sites provided by Linux friendly companies such 
as IBM‘s DeveloperWorks and O’Reilly’s Linux 
DevCenter, mailing lists, local Linux user groups, newsgroups, Usenet, 
GNU manuals and download sites, web logs, rants and raves and howto 
sites for newbies, and every one of these can be found with judicious 
searches, typically using Google. 

If the internet, properly used, is the most diverse information resource 
that has ever existed, Linux is certainly the best supported and most 
thoroughly documented operating system on the Net. Newsgroups, 
discussion groups and mailing lists are a common resource for new users 
of Linux. If somebody tells you to RTFM (Read The Manual), or RTFS (Read 
The Source), tell them to join the Foreign Office (FO). One of the many 
advantages of Free Software is that the source is available to your peers, 
who will tend to tolerate the good and ditch the bad. Illegible code isn’t 
sustainable in an Free Software project. For this reason Free Software will 
tend to be more legible and better organised than the code at many 
places of work. Even so, reading the source is not always the best way to 
discover what the coder intended - which is not always the same as what 
the code actually does. Good documentation is vital for users, initiates, 
“wannabe real programmers”, contributors, and those that just want to 
get involved, not to mention those who have (or think they have) 
forgotten more than the rest of us will ever know - for, as the philosopher 
of Springfield, Homer Simpson, once said: “Every time | learn something 
new it pushes some old stuff out of my brain.” 
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@ The Open Road 


Dark Matter 


ust as physicists face challenges in gauging the quantity of Dark Matter 

in the universe, so do analysts, authors, and end-users miscalculate the 

rate of Linux adoption. Whether we look to enterprise servers, network 
infrastructure, embedded devices, or to that most luminous of computing 
bodies, the desktop, there is no agreement on how pervasive Linux and FOSS 
are becoming, nor on the best way to measure their progress. 

Accepted market figures for Linux build upon hardware vendors’ reports of 
how many systems ship with Linux pre-installed. With proprietary OS 
software, like Windows, MacOS or legacy UNIX, such figures are reliable due 
to strictly controlled per-unit software licensing. With Linux and other Open 
Source software, a completely different paradigm applies. The GPL. and most 
other FOSS licenses do not require that hardware distributors count the 
number of instances of the OS shipped. When hardware vendors do count, 
they do so to measure their own product share. 
How does Linux make its way onto most 
computers, anyway? Most Linux adoption is “after 
market”, ihat is, not as factory-installed software. 
Worldwide, organisations that use Linux end up 
installing it over existing Windows disk partitions 
or beside it in dual-boot configurations. Legacy 
hardware, when it was new, shipped with 
Windows95 or 98. So, even in regions like Latin 
America, Asia, and Africa, where Linux is a 
recognized value platform, Microsoft will always 
“arrive first” in the numbers game. 

Linux is not anti-matter - its installation does 
not annihilate the OS license sold with the 
machine. The response to this half-empty cosmic 
glass is to ask end-users what they use. 
Unfortunately, self-reporting creates new 
uncertainty. First, whom do you ask? Large 
enterprises? Small businesses? Individual end users? Because no cheques were 
written to acquire FOSS, many organizations don’t even know how many 
copies of Linux they’re using. In countries with draconian anti-piracy laws (like 


“Sales of our products may 
decline, we may have to 
reduce prices we charge for 
our products, and revenue and 
operating margins may 
conseguently decline” - 
Microsoft, 30 June 2004 


the Lei de Informatica in Brazil), companies migrate to Linux explicitly to 
avoid accounting for software licenses. Also, adjudication of SCO v. IBM and 
SCO v, AutoZone is still looming, So, while Linux adoption is by all accounts 
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strongly ascendant, disclosure of that adoption is highly occluded. 
Conservative counts for enterprise Linux installed base are in the tens of 


ns; optimistic assessments are several times higher. However, 
deployments for successful embedded applications, like cell phones, can 
easily top ten million units each. Embedded represents both zenith and 
nadir in adoption. On the upside, analysts focusing on embedded already 
awarded the Number 1 spot, share-wise, to Tux. Astronomical numbers of 
wireless smart-phones and feature-phones, home digital video sets and 
PVRs, network appliances and routers, storage devices and SANs, and SOHO 
MEPs and other equipment are developed, shipped and deployed with 
embedded Linux on-board. 

The downside is that real share is hard to count - commercial embedded 
Linux accounts for about US$80 million in a total served market of US$750 
million (VDC). Device developers today don’t pay 


for OSes. Moreover, OEMs have never liked to 
disclose what software they put into a gadget - 
OS and stack provide competitive advantage. 

The centre of the FOSS vs. proprietary 
struggle lies on the desktop. Small victories mark 
Linux progress in 2004: with an estimated 2.8 
per cent commercial share (IDC), Linux this year 
overtook MacOS (and overwhelmed desktop 
UNIX share in the last five years). Some studies 
show second-tier commercial and free 
distributions like Mandrake, Debian, Fedora and 
Gentoo Linux actually leading over commercial 
desktops from RedHat and Novell/SuSE. Such 
surveys and growing enterprise-wise adoption 
could multiply that 2.8 per cent by a factor of 
two, four, or even tenfold. Curbs on Linux 
adoption, however, come from after-market 
installation of ersatz copies of Windows, especially in China, on naked PC 
hardware and even over pre-installed copies of Linux. 


While most analysts are free-thinking and well-intentioned, studies are 
often funded by moneyed interests. But the consensus is that Linux is gaining. 
Even Microsoft acknowledges this trend. Redmond has graduated from 
studiously ignoring Linux to denigrating its gains to mustering obscure 
benchmarks and marginal metrics to show advantage. 

Alsa very telling is Redmond’s assessment of Linux impact on current and 
future business: “non-commercial software... continues to pose a significant 
challenge to our business... To the extent that open source software gains 
increasing market acceptance, sales of our products may decline, we may 
have to reduce prices we charge for our products, and revenue and operating 
margins may consequently decline” - Microsoft 10-K for FY Ending June 30, 
2004. Linux users (and pundits too) live in a hostile and uncertain universe. 
Linux adoption is difficult to measure and to defend. The best gauges are 


indirect, like declining growth of proprietary software sales in a recovering 
hardware marketplace. We probably won't even notice the supremacy of dark 
matter - Linux and FOSS - until the lights start winking out at proprietary 
software suppliers. 

Bill Weinberg is Open Source Architecture specialist and Evangelist for the Open 
Source Development Lab (OSDL) 
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HACKING THE GLOBAL SOUNDSCAPE | 
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In the second of a three 
“+ part articléexamining the 
growing artistic uses of 
», fee software,-Martin Howse 
. probes the world. of artist- 
developers working primarily 
with self-coded audio apps 


ackers have always been attracted by 

audio, fascinated on the one hand by 

the intricacies of compositional structure 
and on a more granular level, obsessed with how 
sound itself is created, Computers create an ideal 
platform for both areas of investigation, skilled as 
they are in dissecting such structural qualities. It’s 
hardly a coincidence that Johann Sebastian Bach’s 
work features so heavily in the work of pioneers 
such as Hofstadter. And ever since the Italian 
Futurists in the early twentieth century embraced 
the speed and violence of new technologies, 
making sound with machines has exerted a 
fascination on all manner of artists. When 
computer hardware and languages became 
sufficiently advanced in the early 60s to suit the 
modest needs of audio, parallel developments in 
audio theory and computer science spawned a 
new and still relatively youthful field of artistic 
research, which now with the growth of free 
software does seem to be undergoing a 
renaissance. 

Given that most audio or compositional 
Processing is less computationally demanding 
than, say, work with video, this field does have a 
longer, if not richer, history. It’s common 
knowledge that as the intelligent computer HAL 
slowly dies in Kubrick's 2001, the machine 
regresses through the history of its ilk, to sadly 
sing “Daisy, Daisy, give me your answer please,” 
the first song ever sung by a computer. Coded by 
pioneer Max Matthews at Bell Labs, coincidentally 
the birthplace of UNIX, “Daisy Bell” was 
generated using MUSIC IV, a Fortran-based music 
programming language. MUSIC IV was obviously 
only one iteration of the flexible language MUSIC- 
N. As Matthews states, “Computer performance 
of music was born in 1957 when an IBM 704 in 
NYC played a 17 second composition on the 
MUSIC I program which | wrote.” 

MUSIC-N sowed the seeds for open sourced 
languages such as Csound or environments such 
as SuperCollider, which are still heavily used and 
developed by artists today, What's surprising is 
that a flexible, extendible language-based 
approach to the creation of sound has been 


Networked performance system for junked PCs, ap at 
Electrohype2002 


around since the very birth of digital audio. And 
it’s possible to argue that such a methodology, a 
way of working with art and code which stresses 
the creation of new structures and environments, 
is inextricably tied up with the philosophy and 
development model of free software. 

Artists and computer mavericks shared ideas, 
code and ways of working across diverse 
institutions from Bell, MIT (Massachusetts Institute 
of Technology, another landmark within the 
history of free computing), and Stanford in the 
USA, to the legendary IRCAM (Institut de 
Recherche et Coordination Acoustic/Music) in 
Paris. But even as early as the mid 1970s, with the 
release of funky micros such as Commodore's 
KIM, artists and developers could embrace a less 
centralised way of working, untied from 
institutions; a development model which stressed 
community and openness. Indeed, the less 
demanding nature of audio computation has clear 
benefits, as with the rise of the low cost PC, pretty 
much all but the most ambitious audio works 
could easy be realised on the humble, home PC or 
live performance-oriented laptop. And such 
untethered environments are the perfect 
Spawning ground for an open source approach. 


FREE IWNOVATION 

Artistic digital audio is a youthful field in which the 
most exciting work in recent years has embraced 
a free software model for experimentation, 
production and distribution. It’s an alternative 
mediascape in which artists have no need of 
proprietary models, favouring community and 
experimentation over commercial concerns. It’s all 
about creativity rather than a workaday tool-based 
approach, Nearly all the apps we'll investigate 
either push some artistic or audio boundaries, or 
present novel ways of looking at haw to work with 
code and artistic material, questioning how we 
and machines interact and co-create. In common 
with most academically researched material, 
nearly all seriously experimental and extendible 
audio apps and environments have been released 
with source code, if not strictly under a free 


software license. The big two more traditional 


sound and image as raw data re-processed live by the 
self-recoding ap02 application 
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The aftermath of an ap performance using both ap02 
and gdapp software in Malmo, Sweden as part of | 
Electrohype2002 


music lab apps, Csound and CLM (Common Lisp 
Music) are good examples of audio research tools 
which can easily be located with source on huge 
academic repositories such as Planet CCRMA 
(pronounced karma). Planet CCRMA, collated by 
Stanford University Center for Computer Research 
in Music and Acoustics where pioneer Max 
Matthews now resides, provides a great 
opportunity to witness the breadth and range of 
readily available open source audio apps. The 
repository, which more or less amounts to a 
complete GNU/Linux multimedia distro, replicates 
the research and production environment used by 
artist-developers at CCRMA on a daily basis. And 
AGNULA/DeMuDi, a tailor-made audio 
distribution funded by the European Commission, 
is also well worth checking out (see page 80 in 
this issue). There can be little doubt that free 
software artists have no end of apps and 
environments to play with. And though newbies 
may complain that free software is troublesome to 
install and configure, Darwin and the excellent 
Fink project have led to a burgeoning community, 
as OS X users join the free software fold. The 
benefits are clear and well worth repeating. 

Free software stresses flexibility, independence 
and community providing future-proof, reusable 
and extendible artistic solutions for an impatient, 
fast-moving audio scene. Free software is all about 
throwing away the rulebook; after all computer 
science and digital audio should have no 
constraints at such a youthful age. In recent years, 
as the scene has snowballed, ad-hoc groupings of 
artists based around specific languages, 
environments or approaches have quickly formed. 
Grass roots organisations such as Bek in Norway, 
V2_labs in Holland and Bootlab in Berlin have 
solidified such groups, providing resources and 
support for artists and developers. And although 
Pd (Pure Data) and SuperCollider have probably 
the widest followings, plenty of artists are coding 
their own apps in a range of languages. Free 
software audio artists share a healthy range of 


geek interests and a passion for playing live, 
pushing the envelope well past a lone guy with 
laptop scenario to embrace all manner of noise 
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producing devices and computational 
machinery. With ap’s computer controlled 
record decks and neural synths, Mumbai 
Streaming Attack’s recent TRAMJAM sequencing 
samples using 32 trams in Vienna, and coding 
poetry slams in Denmark, the free software 
audio scene obviously has little in common with 
the dull Cubase clones and tired software synths 
produced by proprietary models. The history of 
computer audio is all about free innovation. 


MAZED OUT 


Hacker-artist’s favourite environment, Pd, really 
does have roots stretching far back into the history 
of computational audio creativity. Based around 
the Max, and later Max/MSP, extendible visual 
scripting environment for audio creation, and 


methodologies, either through extensions which 


can, say, add language scripting possibilities, or 
simply through the abstractions provided by 


sub-patching. 


€O FORTH AND MULTIPLY 


The easiest way to understand Pd is quite simply 
to get up and running, and begin to play with the 
huge range of objects available. Under most 
GNU/Linux distros, Pd is trivial to install, with few 
dependencies and uncomplicated configuration. 
It may well be worth messing with the low latency 
possibilities in recent kernels, or patched earlier 
kernels, and Pd does play well with ALSA and 
JACK, but a base setup is easy to achieve with 
readily available walk-through tutorials. Pd is 
suitably platform agnostic, also running under 


AS THE INTELLICENT COMPUTER 
HAL SLOWLY DIES IN KUBRICKS 


2001, THE MACH 


INE REGRESSES 


THROUGH THE HISTORY OF ITS 


ILK, TO SADLY SING D 


{SY, DAISY, 


CIVE ME YOUR ANSWER PLEASE, 
THE FIRST SONG EVER SUNG BY 


A COMPUTER 


authored by the very same Miller Puckette, Pd 
takes up where the proprietary Max/MSP left off, 
thanks to an incredibly lively developer 
community and free software model. For users 

r with the Max/MSP or Pd environments, 


unfami 
this visual model can easily be described as 
allowing the interconnection of various boxes 
which can pass both data and control messages. 
As you'd imagine from its very name, Pure Data, 


ity of Pd lies in treating audio solely as 
data which can be manipulated, mixed and 
generally thrown around with a huge number of 
maths, control and generator objects able to 
change data pathways, structures and events. 
With such a flattening of audio as simply raw data, 
the possi 


ies are endless, with additional 
extensions also able to manipulate data as 
graphical content or even through advanced 
neural net architectures. 

Collections of connected boxes are called 
patches, and these can quite easily hide 
further sub-patches which simply pass data in 
both directions to the main patch. Patches are 
composed of connections between object boxes, 
messages, GUI boxes such as VU meters or sliders 
and comment boxes for documentation purposes. 
It's a reasonably hierarchical approach but most 
artist’s do adapt Pd to suit their own 
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both Windows and OS X. Documentation is 
intelligently embedded within the Pd package, 
and commented Pd patches are easily accessible 
from within Pd. Examples range from simple 
oscillators through more complex contro! and 
audio patches, to advanced Fast Fourier Transform 
(FFT) examples, converting data from the time 
domain to the frequency domain for further 
analysis and manipulation. Reference patches are 


Alex McLean rises to the live chi 
London Placard headphone festi@ 


also included which document every single abject 
within the base Pd package from sine and cosine 
generation objects, through control, network and 
piping objects, to MIDI and sampling objects. 
Simple patches may use only a small range of 
these, but it is easily possible as we'll see to create 
seriously spiclery patches which pack in hardcore 
networked and control functionality. 

And with ad-hoc groupings of Pd-heads sharing 
ideas and code, extensions have grown up around 
Pd which allow less technical users to more simply 
coerce Pd towards their own particular artistic 
vision. Tom Schouten and Yves Degoyon, 
occasionally working together live as BULT, are 
prime movers on the Pd coding scene, between 
them producing both graphical extensions for Pd, 
and a huge number of intriguing externals. On 
the audio side these include Icecast and 
SHOUTcast externals, vocoders, compressors and 
some seriously complex math and DSP objects. 
Schouten has also recently released the highly 
adventurous packet forth (pf) package, which can 
be used both with and without Pd and Schouten‘s 
PDP multimedia extension. Pf throws together the 
Forth language, Pd, Lisp, Unix scripting and 
hardcore DSP and it could easily be considered as 
a multimedia glue language which can be used 
with a variety of interfaces. Schouten has recently 
prototyped an inferior pf interpreter process under 
GNU Emacs, which also opens up some serious 


live coding poss 


PARTICLE ACCELERATION 


At first glance the popular SuperCollider 
environment does appear to offer a radically 
different approach to audio work than Pd, though 
a good few Pd-heads, such as Farmers Manual, do 
divide time between them and both apps do 
share common roots and an environmental 
coding approach to audio. SuperCollider, or SC, 


ing the intriguing 


— 


Pd-heads debug the latest spidery TRAMJAM patch 
which also uses Python to tie together a supremely 
complex networked and hardware system 


can easily be viewed as a textual code-based 
environment, in contrast to Pd’s obviously 
graphical model. Both approaches have 
advantages and disadvantages, particularly when 
it comes to live work, but it’s easy to see that Pd 
and SC could quite easily compliment each other. 
Indeed, SuperCollider can quite simply be 
interfaced with Pd, to provide the best of both 
worlds. Pd appeals to the artist who wants throw 
together, to jam with, disparate data sources and 
control, maybe interfacing complex hardware, 
whereas SC is perhaps more geared towards 
generating intricate compositional structures. 
SuperCollider has a long history centering 


primarily on the work of one James McCartney, 
Previous to its now open sourced SC3 iteration. 
It's interesting to see our old friend Max pop up 
once mare, with $C1 morphing out of 
McCartney's Max object Pyrite, though SC itself is 
more about MSP style DSP work than pure Max 
control. SC also owes a good deal to the even 
more venerable MUSIC-N apps. It was MUSIC III 
which introduced the concept of a unit generator, 
a subroutine that would create a specific kind of 
sound, which is so central to SC. The program 
consists of two applications, a client which is the 
language itself (sclang) and a server, sesynth, 
which handles the DSP work and sound synthesis. 
With a highly flexible programming language 
engine, and supremely networkable architecture, 
again making use of OSC (see below), it’s not too 
tough to see how far you could push SC, Sclang 
has morphed considerably through various 
versions, borrowing differing teatures, syntax and 
madels from languages such as Smalltalk, 
Scheme, C and even | along the way, but the core 
of math operators, oscillators, noise generators, 
filters, controls, delays, samples, event spawning 
and I/O wrapped up in an extreme object 
oriented model with messages and classes remains 
as the SC approach. Unit generators, such as 
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diverse objects which process or generate sound, 
are an essential part of SC, and the controin 
generator unit class, for example, allows for 
external control sources, graphical sliders or 
Programmatic processes to control parameters. 
Examples would include MouseX and MauseY 
classes, Plentiful online tutorials, wikis, 
documentation and a fresh, active community are 
on hand to provide examples and support, 
though at first SC may well seem like a tough 
cookie to crack, with a code-based approach 
seemingly at odds with most artists’ methodology. 
Getting up and running with SC under GNU/ 
Linux may also present some problems for the less 
experienced user, though quite thorough 
documentation is available. JACK and ALSA are 
absolute necessities, and low latency audio is 
preferable. With these in place, SC3 can easily be 
checked out from CVS and compiled. Somewhat 
lengthy configuration of elements such as JACK 
inputs is necessary before scsynth is up and 
running, and sclang itself does need a startup file 
for class and environment variables, but alll this is 
well documented, Oj 


€ material is also available 
for those wishing to extend SC with plugins, and 
the intriguing architecture of SC should make of 
this an interesting exercise for the artist-hacker. 
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COLING AS PERFORMANCE 
Given that SuperCollider presents a heavily 
interpreted language, which also makes use of 
OSC to send messages to the core sound server, 


live coding in sclang is a real possibility. Live 
coding pushes performance barriers, exposing 
audiences to changing, raw code and providing a 
much needed live virtuosic element for the 
hacker-artist, After all, given the brittle qualities of 
code, live programming is a dangerous 
proposition. Performing without a safety net is 
always exciting. And what better performance 
platform than the flexible GNU Emacs itself. SCEL 
(SuperCollider Emacs Lisp) provides a complete 
mode for working with $C on GNU/Linux. As 
you'd expect, there’s syntax colourisation and 
decent indentation, but also an all important 
interpreter interface. Alternatively OSC messages 
can also be sent to the server app from the 
command line, using sendOSC, or from clients 
such as RSC, a pre-release Scheme SuperCollider 
client. SC has recently established a culture of live 
cading, modifying active algorithms for live audio. 
Indeed, an international organisation TOPLAP 
(Live Algorithm Programming and a Temporary 
Organisation for its Promotion), has recently been 
set up by several artists involved with both self- 
coded apps and SC. Their manifesto, the 
Lubeck04, calls for the exposure of code itself, and 
a more fun, performative aspect to live, computer 
generated audio, Some big names from the world 
of free sound back up these claims, with Alex 
McLean, formerly of Slub, representing the Perl 
and command line approach and both Nick 
Collins, working as Sick Lincoln, and Julian 
Rohrhuber pushing forward on the SC side. Julian 
also provides the intriguing Just In Time 
Programming-Library (JITLib), which comes free 
with the standard SC distribution. 


Oh Vienna 


Yet another approach to live cading, which 
perhaps places less emphasis on the algorithmic 
and stresses the machine virtuosic is provided by 
ap’s ap02 and gdapp apps, both used together in 
live performance. Gdapp, or generic data app, 
maps out coded nodal structures which can just as 
easily be recoded by humans or machines on the 
fly. Nodes, which manipulate raw data of any kind 
obtained from a range of interfaces or the 
filesystem itself, also contain microcode which can 
be re-coded and executed live on the gdapp 
virtual machine layer. And recently, ap have 
extended notions of environmental code and an 
apen source development model into the realm of 
hardware. Their ap0201 project was installed in 
the California desert in April of this year, and 
features ap02 virtual machine software embedded 
within wirelessly networked, solar powered 
machines. Ap0201 devices run 24/7, converting 
audio data input from an extruded microphone 
into code running on the virtual machine. Code is 
executed within a complete computational 
instruction set, which can also access other 
ap0201 nodes or display chosen material on a 
small LCD panel. According to ap (Martin Howse 
and Jonathan Kemp), it’s all about embedding 
code within and as environment. 


STORM IN 4 TEACUP 


From the often messy patches of Pd to the 
supreme interoperability of SuperCollider, in part 
thanks to QSC, it’s all about throwing it all 
together; the good old UNIX philosophy of 
absolute connectivity between small apps and 
elements which can elegantly be recombined 
towards a greater whole. JACK and OSC should 
both be given adequate credit as enabling open 
source apps, through providing an infrastructure 
which allows software to communicate and 


Thomas Grill, Viennese performer and composer, has contributed some ground breaking work 


to the Pd community, providing for full integration of the Python scripting language with Pd, 


and also with his flext plugin, unifying Max/MSP and Pd externals. His dyn— external creates 


tense pos: 


nnection of standard PD objects and abstractions. Austria defi 


es for self-coded, generative work, allowing for the dynamic creation 


ely does seem the place 


to be if you're interested in Pd performances or workshops, Farmers manual, well known 


electronic sound artists based in Vienna, are also active on the Pd scene, producing both 


performance and code, including externals in 


tegrating Pd with OSC (OpenSound Contr 


Artists such as Erich Berger have also taken part in chaotic Pd Stammtisch, or conventions, in 


the Austrian city of Graz. And more recently, Mumbai Streaming Attack made fantastic use of 


the timings inherent within the Viennese tram ne 


‘ork, to produce a masterful lectronic jam 


concert orchestrated by a huge Pd patch produced by Mare Widmer amongst others 


TRAMIAM-Vienna RushHour created a high! 


networked streamed performance using the live 


schedule (through interfaced tram door openers) of 32 tramlines, re-mixing and re- 


broadcasting live electronics from 32 tramjammers, And all this acoustic mayhem was 


provided, ¢ 
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esy of the supremely flexible, highly playful, free Pd 


Key links 


Csound 
www.csounds.com 


CLM 
fittp://ccrma.stanford.edu/software/cim 


Planet CCRMA 
http://ecrma.stanford.edu/planetecrma/ 
software 


Music And Sound Software 
http://linux-sound.org 


Agnula 
www.agnula.org 


Bek 
www.bek.no 


Bootlab 
wiw.bootiab.org 


Pd 
http://pure-data.iem.at 


SuperCollider 
www.audiosynth.com 


Yves Degoyon 
http://ydeqoyon.free.tr 


Tom Schouten 
http://zwizwa.fartit.com/pd 


Thomas Grill 
www.parasitaere-kapazitaeten.net 


Farmers Manual 
hitp://barely.a.live.fm/pd 


TRAMJAM 
http://tramjam.net 


Erich Berger 
http://randomseed.org 


TOPLAP 
www.toplap.erg 


ap 
www.1010.co.uk 


osc 
www.cnmat.berkeley.edu/ 
OpenSoundControl 


dyne:bolic 
www.dynebolic.org 


Tramjammers furiously work free software audio 
across the Viennese tram system 


Present differing, custom interfaces or ways of 
working. OSC is particularly interesting in that it 
does enable communication across so many apps 
such as Csound and Pd, as well as being easily 
implemented within languages like C or Python. 
The networked protocol which defines OSC is well 
documented, and allows for a good deal of 
flexibility in sending messages. Equally interesting 
is the audio equivalent of ascii video, low level 
work with audio which exploits core Unix features 
such as FIFOs (named pipes for data), or uses the 
versatile netcat tool for networked audio. 
Extensions exist to pull such data into Pd, opening 
up new worlds of interconnect and interoperation 
between shell and apps. 

Without even touching on issues of free 
distribution, it’s already easy to appreciate the 
richness of the open audio community. Few GNU/ 
Linux users will be unfamiliar with the dyne:bolic 
live CD, which packs in a wealth of audio apps 
requiring little if any setup. Dyne:bolic is very 
much focused on net radio uses and streaming 
efforts, with the powerful MuSE app as 
cornerstone of any free audio studio. Alongside 
distros such as Agnula and repositories such as 
Planet CCRMA, dyne:bolic is all about easing the 
learning curve for artists and developers new to 


the free software scene. This is an essential task, 
which both new and seasoned artist-hackers alike 
can easily contribute to, with blogs and shared 
patches or code. And although we may have 
examined the work of artist-hackers across a rather 
artificial divide of audio and video work, it is 
necessary in attempting to assess the differing 
histories and technological demands for future 


Ascii audio 


Though most artists we’ve explored have w 
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users. Video is perhaps more difficult to work with 
both due to technical constraints and perhaps a 
less physical response. Nonetheless, in next 
month’s final installment, we'll witness intriguing 
solutions to these issues, again using core apps 
such as Pd and SuperCollider, and once more 
hacking artistic boundaries and presenting clear 
alternatives to proprietary models. 


some success in integrating visual 


material with live audio, few have examined such a novel approach to their parallel 


development as has Erich Berger in his recent Tempest piece with GEM (a graphical extension 


to Pd). Tempest is inspired by security wark based on decoding or recoding electromagnetic 


radiation praduced by a good deal of electronic equipment. Here’s how it works. A cor 


monitor emits such waves at very high frequencies which can easi ly be picked up by a sh 


wave AM radio. These waves can easily be decoded to recreate the screen image, or inversely 


screen images can be created to generate certain 
by Pekka Riikonen and Erik Thiele, with his GPLed Tempest For E 


tones. The latter quality was first investigated 


, which cleverly adcasts 


Beethoven's piece Elise. Berger takes the concept one step further, cleanly wrapping up audio 


and visuals with a neat, effortless solution which has no need of window dressing such as beat 


matching. It’s a wonderful example both of openly sharing ideas and technologies to arrive at 


novel approaches, as well as demonstrating how far the free software world is from the 


banality of proprietary approaches to audio 
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@ XFree86 and X.org 


The political rift and fork of the XFree86 project has caused controversy in the Open Source 


community. Jono Bacon talks to Keith Packard and Eric Anholt about the past and future of X 


t has often been proclaimed that the IT industry is something of a 

puppet show. The great armies of PR types clutching press releases have 

turned the art of spin into a culture for dealing with customers. Not only 
is the spin bolstered by often contradictory statements from executives, but 
the allegiances and battles within the industry have produced a spectacle 
that is as farcical as it is sometimes fascinating. Despite the rollercoaster of 
thetoric, one could be forgiven for thinking that such things didn’t happen 
in the open source and Free Software community. 

Ever since the earliest days of the Free Software community differences of 
opinion have arisen around the fruits of the community's labour. These 
differences have been expressed by some through careful, well composed, 
and considered argument, while others have resorted to bickering. We all 
know about the flame fests that surrounded KDE before Tralltech changed 
the license of qt, or the various spats between Free Software advocates and 
the founders of the Open Source Initiative during the late nineties. A more 
recent, but equally rivetting, argument has floated to the surface in the 
wonderful yet contorted world of XFree86. 

As an Open Source project, XFree86 is not your typical run of the mill 
affair. Inside the XFree86 organisation there are rules and conventions that 
can differentiate particular developers and contributors, and give priveleged 
access to developer resources. With such a bureaucratic method of dishing 
out the hooks into XFree86, many developers have found it difficult to get 
their features and improvements added to the software. In addition to this, 
the natural sense of developer influence that is common in other projects 
has been missing with XFree86. Many of the developers have felt as if they 
were prevented from pushing the project forward and contributing 
improvements. 


X MARKS THE SPOT 
Eric Anholt, a 21 year old student of Computer Science and Mathematics at 
Lewis & Clark College, USA, started working on the DRM (3D kernel 
modules) for FreeBSD in 2001. Anholt focused on the DRI (Direct Rendering 
Infrastructure - a method of directly accessing hardware), and maintaining 
the FreeBSD version of X, until he found employment as a student intern 
with LinuxFund a year ago. This job gave him the chance to work with DRI 
client drivers, improving performance (including presenting a paper at 
USENIX) and working on X.Org. Back in 1999, Anholt was involved with 
XFree86 and was one of the project's ‘members’. This privilege gave him 
access to some of the controversial private lists, and to the ancient set of X 
specifications. 

Although part of the XFree86 A-list, Anholt felt that the project had 
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limitations, and ran against the commonly understood norms for running 
an Open Source project. Anholt had written a number of software patches 
to improve Xfree86, but the rules of the organisation did not allow him ta 
commit his changes to the code. “The committers committing my patches 
clearly weren’t reviewing them. Then David Dawes (one of the XFree86 
founders) started removing people from the project, while paying lip service 
to ‘openness’ such as adding the forum mai 
Anholt was not alone in his frustrations with the XFree86 project. In 


“That's what's really exciting about being in 
this project. After I finish working on some 
major issue, we've still got many other 
interesting projects to work on, and there's 
general agreement that these things do need 
to be done” - Eric Anholt 


March 2003, extensive discussions began on an XFree86 mailing list 
regarding some of these problems, and a number of individuals, groups and 
organisations chipped in with their own concerns. What was evident from 
these discussions was that XFree86 was not satisfying a number of 
interested parties. The complaints ranged from the relevance of XFree86 to 
technical shortcomings and problems with the way the project was being 
managed. 

One developer who had experienced problems working within the 
XFree86 culture was Keith Packard, a core developer who has written many 
key parts of the software. Packard had tried to express his concerns, and 
made attempts to restore faith in the organisation. “Upon learning of my 
discussions, the XFree86 leaders were angry that | could privately disagree 
with their leadership while publicly supporting the project itself,” says 
Packard. “The result was that | was summarily removed from the core team 
and subjected to censure on public mailing lists and web sites.” 

In ad 


n to the problems being faced by well established hackers such 
as Packard, the inner core of developers had made the decision to modify 
the license agreement. Although Richard Stallman was happy with the 
amended license, a number of other groups and individuals felt that the 


changes were unacceptable. 

With tension building up, and developers feeling like they were hitting a 
brick wall, it was decided to pursue an alternative means of developing an X 
server. The decision was made by a group of hackers that X was a solid and 
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Modularising X 


A continuing problem with XFree86 for the Linux distributions has 


the lack of separation has meant 

ng X a challenge that has often involved breaking other parts 
of the system when major improvements to X have occurred. The 
unwieldy nature of X has also caused problems for developers. The 


solution has been to modularize X into different contained chunks that 


can work together. This technique has been particularly popular in 


other Open Source projects such as Apache and PHP, and Adam 
Jackson has fixed m 
loaded madules. 

The modular approach to X elp to bring the software 
more forward-facing, bug reporting and feedback generating, culture. If 
distributions can make functionality available as modules, this will give 
users the opportunity to provide feedback and bug reports based 
around specific parts of the X framewo | expect that this will help 
find bugs and improve stability in those funny cases that all of us X 
users have experienced, so the next release can be more solid than 


Eric Anholt enthuses. He continues to express his modular 


dependable platform, but the XFree86 project was preventing it from 
developing and evolving further. Anholt says: “It seemed more or less 
inevitable that the people removed would start something new. | think 
X.Org is about the best result any of us could have imagined out of a 
bad situation.” 


With a number of notable X developers leaving the XFree86 project, the 
challenge was to foster the improvements and refinements that the hackers 
had been wanting to implement, but to avoid the mistakes that had 
blighted the XFree&6 legacy. Packard set to work on creating a new 
organisation that could achieve these goals. 

Back in April 2003, when the discussion of a fork of XFree86 was first 
discussed, Packard had summarised his thoughts: “Over the last year or so, | 
have become convinced that XFree86 is heading for a disaster - widespread 
adoption of Linux on the desktop will cause a catastrophe for X 
development given the current lack of resources and inability to scale the 
project beyond its current bounds.” He concluded that there was “ai 
urgent need to open up development and invite in new contributors”, while 
observing that “changing processes to make the existing contributors more 
effective seemed critical. | believed that fixing the processes would avoid the 
impending disaster. However, my attempts to work within the existing 
structure have proven less than effective.” 


us could have imagined out of that bad 


The creation of X.org has given an opportunity for the developers to 
resolve many of the problems that were inherited from the XFree86 project. 
Although the team were readly to start afresh, it was a challenge to get the 
wheels in motion. “| make a differentiation in my head between X.Org 
before we released version 6.7.0, and the current X.Org”, says Anholt. “It 
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ambitions: “For the next release we want to stop distributing a 
monolithic tree altogether, We will autotool the X Server, move the 
libraries into the xlibs project, and package the fonts separately so that 
the distributions can update tl cemeal, rather than as one big 
drop every six month addition to this, people interested in working 
in one small area of code can recompile and install just that piece, rather 
”, The concept of 
shrinking different parts of X tain and 
manageable cor ease the 
elease cycles of X and speed up development. The X.org team are 
s six month cycles instead of the longer Xfree86 release 
ng, wasn’t serving its 
says Anholt, “Users weren't following CVS, and 
distributions only paid attention when a new release was made, anc 
they found things that were broken. Now we can have a better 
turnaround time, keep X.org on people's radars as an active project, and 
n doing so encourage more involvement from new developers. People 
have more of a motivation to participate when they know that at some 


point they'll be recognised, and added as a committer” 


was a Closed group before, with the 
ense debacle, but | think at 


history of a 
this point we’ve got a lot of the openness 
issues resolved. This is not to say that 
we've ironed things out. There are still 
some things that are undefined, since 
we're basically a new group. How do we 
decide who gets CVS access? How do we 
handle inter-committer disputes? | was 


expecting release engineering to be a big 


Keith Packard 


issue, but it’s being handled excellently. | 
think actively embracing new tools like bugzilla and having all developers 
use them helps out greatly in this process, rather than the reluctant use of it 
as a submission queue with XFree86.” 

Anholt is certainly aware that this is not the first time that the X code 
base has experienced problems. “It is sad to see XFree86 get so mired in its 
issues that a project had to replace it - it happened before when the X 
Consortium dropped the ball on allowing porting, and XFree86 had to fork 
to get things done” he says. “Hopefully, this won’t happen ever again, but if 
it does, it will be a pain - but developers will move to the new project and 
say, ‘it is sad to see X.Org go but it needed to happen’. This is 
open source, things happen, and lets not worry too much about the specific 


everyone wi 


failings of certain projects at certain times. Lets just try to do the best we 
possibly can now so that we can get the jobs we need done, done.” 


Since the X.org project became active, the developers have made 
considerable progress. The core pieces of X are 20 years old, and although 


responsibility for them has passed from group to group, they’re still 
composed of the same well tested and dependable core. X.Org has not 
resorted to using newer untested code, and is purely a fork of the XFree86 
code - this fork has ensured compatibility and faith in the new code base as 
it matures in new directions. 

The way forward for X.org is a path paved with new features and higher 


performance. “We're actively working on new features”, says Anholt. “This 


orn 


includes the Composite, Damage, and XFixes extensions that will allow 
radical changes in the graphical manipulation that can be done on your 
desktop. It also includes Xevie, which will allow event translation and wi let 
you do even more manipulation of windows. In addition to these 
improvements, new acceleration work such as the Render acceleration I've 
been working on for the Radeon 100 and 200 series cards will greatly 
improve font performance”. 

With the move to a more open and accessible infrastructure for 
developers, other technologies that were typically outside the realm of 
XFree86 have been integrated into the system. “We've been able to fold the 
X-related pieces DRI tree into X.Org”, says Anholt. “This wasn’t possible 
when XFree86 was the dominant project, because they wouldn’t allow CVS 
access for all the DRI developers. Now, we (DRI developers) will be avoiding 
a lot of pain in merging trees, and providing our users with an option to get 
the development drivers that can’t be officially released.” 


On August 25th 2004, the X.org development team will release their first 
official version of the X.org system. The culmination of their efforts will be 
ready for distributors to work into their products, and the vast majority of 
distributors have expressed an interest in replacing Xfree86 with X.org, 
particularly due to the licensing issues. This release will provide a solid 
platform on which the different desktop and client technologies can utilise 
the new features available from X.org. 

The X.org team are confident that X development can move into new, 
interesting and uncharted areas. Although many people will view an X 
server as a behind the scenes technology component, there are a variety of 


ways in which the software can be further expanded. “There’s so much to 
be done!” begins Anholt. “That's what's really exciting about being in this 
project. After | finish working on some major issue, we've sti got many 
other interesting projects to work on, and there's general agreement that 
these things do need to be done. On my list for the release after this one, is 
finishing up a new acceleration architecture to replace XAA (with better 
offscreen memory management and allowing for proper Render 
acceleration), adding Render acceleration for other popular drivers (Rage 
128, Matrox, perhaps older NVidia cards), adding textured XVideo support 
for popular chipsets, working with Keith on improving software Render 
performance, working on improving our GLX implementation if | can, and 
probably more things I’m forgetting”. 


Although the X story is certainly not a unique example of differing views in 
the Open source world, it tells a simple moral, that openness in a project 
has to extend to the environment in which the ethically sound open code is 
forged. The political and social upheaval has demonstrated impressive zeal 
on behalf of the X.org founders. These efforts have defined the theory that 
one of the keys behind Open Source technology is the collaborative angle - 
if you remove this ability to collaborate, you gut the project of one of the 
most fundamental attractions for the developer. 

With the support of the vast majority of distributions in pushing X.org 
forward as the de-facto Linux X server, the emotional and philosophical 
turmoil would seem to have been worthwhile. The truly exciting period of 
desktop development is just beginning, and it will be inspiring to see where 
the future of the Linux desktop will lie. 
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@ Conference Report 


Our roving correspondent, Jon Masters, reports upon the success of the recently held 2004 


Ottawa Linux Symposium, combining a key technical conference with a taste of Canadian flair. 


The Ottawa Linux 
Symposium, 2004 


The Ottawa Linux Symposium has quickly become 
a key event in the annual Linux geek calendar and 
a must-have experience for all those involved in 
Linux core development. Held each summer in 
July, OLS strives to provide a unique mixture of 
technical talks, seminars and social gatherings on 
a range of topics from the kernel itself to security, 
networking, and related research projects. It is set 
across the backdrop of Canada’s beautiful capital 
city and runs for four days at a cost of only a few 
hundred pounds, attracting an audience from 
around the world. 

first heard about the Linux Symposium quite 
some time ago, but had never actually gotten 
around to actually going, and decided that this 
would be the year that | finally turned up. The 
conference ran from Wednesday 20th to Saturday 
24th July, with a pub night on the Tuesday 
evening beforehand. | flew out of London 
Heathrow with Air Canada and arrived in Ottawa 
(somewhat jetlagged) on the Tuesday evening. 
After a brief diversion to a pizzeria with a group of 
friends who were also attending the conference, 
we headed to the official gathering in time to 
share a few drinks with the likes of Alan Cox and 
various other faces of the Linux community. 


THE INCREDIBLE DRINKING STRAW 
The evening was a good social outlet and an 
opportunity to put faces to many of the Linux 
community names with which we are so familiar. 
Of course the likes of Rik Van Riel and Alan Cox 
were there, but | also particularly enjoyed once 
again meeting Geert Uytterhoeven (M68K Linux), 
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wham | have had email conversations with in the 
past, and Ben Herrenschmidt (of PowerPC Linux 
fame), who wrote much of the code which 
powers my Debian Apple laptop. 

Alan managed to dazzle everyone with his 
incredible drinking straw (which was really four 
plastic straws joined together) through which he 
could drink beer from all angles, and Keith Harris 
demonstrated his LED binary counting wristwatch. 

\ later joined Tom Rini, Matt Porter and a 
number of other guys from Montavista, as well as 
various other embedded Linux developers and we 
headed off for a separate late night Embedded 
developer's drinking session in a nearby Irish pub. 
They were still serving coffee so | fought jetlag 
with a healthy caffeine overdose and we 
collectively talked shop until the early hours. 
Returning to the conference hotel, we caught Alan 
and various others typing away in the lobby, and 
stayed there talking until eventually even the most 
diehard of geeks had gone to bed. 


GETTING X OFF THE HARDWARE 

The conference itself is held at the Rideau 
conference centre, which adjoins a large shopping 
mall and is situated within five minutes of the 
official Les Suites conference hotel. The talks are 
held simultaneously across four separate rooms, 
and so it is necessary to pick and choose a little 
amongst the excellent array of available options. 
in system software and the 


As my main interest 
Linux kemel, | mostly opted for the lower level 
stuff where relevant. After registration, Wednesday 
morning for me consisted mostly of kernel talks, 


beginning with a talk from Jonathan Corbet (LWN 
founder and author of Linux Device Drivers) on 
the future of Linux 2.7. 

OLS immediately follows the Kernel Summit, 
which is held on the preceeding weekend, and so 
at the conference there was plenty of news about 
the changes we can expect in 2.6 prior to 2.7. 

The first morning was filled with several talks on 
Block IO and performance, but | elected to attend 
only one of those talks, given by Jens Axboe. Jens 
gave a good overview of the present and future 
for Linux Block IO, although much of the material 
is already covered in Robert Love's excellent 
“Linux Kernel Development” book. | also enjoyed 
a talk from Keith Packard entitled “Getting X off 
the hardware”, in which he discussed the issues 
involved with getting X to detect changes in 
screen geometry, reconfiguring devices, and 
various other known issues with X. 

Sometime around noon, Linus turned up on his 
way to the airport. He had been in Ottawa for the 
preceding Kernel Summit and had time to attend 


Getting X off the hardware 


The incredible drinking straw 


a couple of talks before he left for his flight home. 
| talked t6 him for a while about his dislike of 
kernel debuggers, and on life in the US for him 
and his family. In the afternoon, | enjoyed a talk 
on Dynamic Kernel Module support before 
heading back to the hotel and passing out fram 
exhaustion. | did not attend the AMD sponsored 
evening dinner. However, | was reliably informed 
afterwards that | had missed very little and was 
grateful for the by then much needed sleep. 


HOTPLUG MEMORY 
Thursday morning featured talks on Linux 
scalability and Virtualisation on POWERS systems. 
| enjoyed meeting Dave Boutcher of IBM, who 
gave the POWERS presentation. The Hypervisor 
support in modern Power microprocessors allows 
for some very intriguing virtualisation and 
hardware support for partitioning. However, 
documentation is always a problem with such 
technologies and the talks allow one to get more 
of a feeling for the implementation. | also learned 
that there were scheduler improvements 
required in scaling Linux up for the SGI Altix 
servers - a potential kerne! livelock could occur if 
cluster nodes were thrashing their caches, and 
causing the scheduler to run slowly enough that 
it got called again before it could complete a 
run. Discussion of Linux scheduling domains was 
well received by me as I had not yet played with 
this exciting new development, which allows 
Clusters to be partitioned into scheduling groups. 
| took the opportunity to spend lunchtime 
exploring the city a little and walked up to the 
Houses of Parliament and down to the river. As | 
walked along the canal, which passes through 
the town, | met some local residents with GPS's 
and so | enquired as to whether they were 
geocaching. | subsequently joined them in the 
hunt for a microcache which it would turn out a 
local Linux user had planted along the canal. 
Upon my return to the conference centre, | 
elected to hear the ever amusing wit of Rusty 
Russell accompany a talk on Linux Kernel hotplug 
CPU support, Rusty is one of these people you 
have to meet to truly appreciate, but those who 
have read his locking guide to the Linux kernel 


will already have an appreciation for his wry 
sense of humour. It would seem in summary that 
hotplug works well for removing CPUs and less 
well for adding them in running systems. Dave 
Hansen followed with “Hotplug memory and the 
Linux VM”, which was also interesting but | do 
not recall it going in to issues such as paging 
kernel memory. | 

The afternoon was wrapped up with two 
BOFS (seminar sessions) from Hariprasad 
Nellitheertha and Vara Prasad of IBM discussing 
Linux Kernel Crash Dumps and fast recovery. | 
learned about the relayfs filesysterm and how it 
can be used to provide kernel access to store 
filesystem data as well as the kexec capability in 
Linux to load and boot a new kernel without 
rebooting - very useful for debugging without 
destroying memory. A protracted discussion took 
place over kernel debuggers and the possible 
inclusion of tracing support in the stock Linux 
kernel within a reasonable time frame. Most 
people, it would now seem, agree that Linux 
needs to have at least some fundamental support 
for tracing built into the running kernel. 
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apparent at first. In some cases it really is best to 
allow the hardware to figure out write ordering 
and write requests on its own. Alan Robertson 
of IBM backed Linux HA project gave an 
interesting introduction upon the nature of his 
project and its goals. 

Saturday morning featured talks on scalability 
and high availability. | attended the GPG 
keysigning party but missed the BOF session on 
udev, the up-and-coming replacement for devfs. 
Richard Gooch, the original author of devfs, was 
in attendance at the conference and it was 
interesting to hear his views on the matter - | 
got the feeling that he is still somewhat 
resentful of this, but has perhaps accepted that 
devfs is dying a slow and painful death. Andrew 
Marton (stable kernel maintainer extrordinare) 
gave the keynote speech which ended the 
Official conference and focused on where we go 
from here in terms of world domination. 

| asked Andrew whether the recent decision to 
continue development with the 2.6 stable kernel 
series meant that reliability would suffer, and he 
assured me that he would bring out post releases 


Alan managed to dazzle everyone with his 
incredible drinking straw (which was really 


which 


VINDALOO 

On Thursday evening, | joined a number of 
people from Redhat in a nearby Indian 
restaurant and subsequently headed out for a 
moonlit walk around the town with my camera 
in hand. | walked across the road bridge in to 
Quebec and back before walking around most 
of the town centre. | was simply awestruck at 
the cleanliness of the town and the friendliness 
of most of the residents that | encountered. 
Ottawa really is a truly amazing place to visit. 
After my walk | headed back in to town to find 
the Montavista guys in a small pub which was 
open late. 

Friday consisted of a variety of talks from 
Linux 2.6 performance improvements to 1O 
scheduler evaluation and the High Availability 
Linux project. | learned that the Linux lO 
Anticipatory Scheduler (AS), which is the default 
on most systems, really does not work well for 
systems with a very large number of high 
performance SCSI disks. Although one may 
intuitively expect this, it is perhaps not so 
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of known good 2.6 kernels (such as 2.6.7-post! 
or something similar) if it became necessary to 
do so. He also said that vendors can continue to 
release their own verified kernels as they have 
been doing for a number of years (but if you 
have no vendor then of course the onus is on 
you to do sta 

My return flight was late on the Saturday 
evening and so | was forced to leave early fram 
the final party. However, | had time for some 
food beforehand. Amongst those who joined 
me for food was one Russell King (ARM Linux), 
whom I talked to at some length about dual 
core ARM processors and all manner of other 
random topics. 


The Ottawa Linux Symposium truly is a 
fantastic event which has to be experienced to 
be understood. Unlike FOSDEM, this conference 
attracts a larger number of core Linux movers 
and shakers, although at the cost of a more 
formal atmosphere. | personally enjoyed OLS 
and Ottawa on a number of levels and hope to 
be there again for next year. 
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famous marques might 
dash and panache, 
applied to every 


and car's performance 


Linux drives Ferrari to the front of the grid - with a little help from 


Michael Schumacher, AMD, and the mechanics at Maranello 


ormula One Grand Prix racing is not what 

it used to be. Every year the cars get 

faster, the lap records come down, and 
the drivers and cars reach new limits of 
endurance and performance, despite a regular 
tightening of the rules for the sake of safety and 
increased competitiveness - every new rule that 
is imposed to slow the cars down or level the 
playing field becomes a challenge for the 
designers, to readjust the vital balance of 
weight, material, power, downforce, grip, and 
traction, to pull one over on the competition. 

A quarter of a century ago, motor racing s 
reached back to its roots of gentlemanly daring, 
of flowing scarves, oil in the face, splattered 
goggles and brute force at the steering wheel. If 
the stories are te be believed, James Hunt would 
come straight to the race from a party the night 
before, with whisky on his breath, and race to 


Linux on 


win after a night on the tiles, in a car funded 
and built by his soulmate, Lord Alexander 
Hesketh. But it’s highly unlikely that any modern 
driver could write a similar legend - not for lack 
of courage or personal charm - but because 
racing has become more sophisticated every 
year, as the engineers and designers search for 
fractions of a second of performance in a 
miniscule adjustment to the alignment of the 
wings, or some otherwise inconspicuous 
characteristic of the car. Motor Racing has 
become big business, and each fractional 
advantage is bought at a cost of millions of 
pounds of research and development, paid for 
by hard won deals with the sponsors. 


Where once the famous marques might have 
depended on dash and panache, precise science 
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@ The Tux Racer 


is now applied to every aspect of the driver and 
car's performance in order to squeeze a fraction 
of a second out of the lap time. Good drivers 
are valued not just for their speed and courage, 
but for their sensitivity to the nuances of the 
car’s performance, which helps the mechanics 
and engineers to adjust a millimetre here or a 


“Good plannin 
and tactics make 
all the difference” 
= Ross Braun 


centimetre there, which can be the difference 
between success and failure in this most 
unforgiving of sports. The technology and 
science applied to race cars is more akin to the 
development of jet fighters than that applied to 
conventional sports. 

The winning team for the last four or five 
seasons has been Michael Schumacher and 
Ferrari, While Schumacher is acknowledged by 
race goers, sometimes reluctantly, to be a class 
apart, Ferrari has always been the team of the 
romantics, and has provided Schumacher with 
a car that is built to win, During the last few 
years, the sport has become something of a 
procession, with the famous red cars leaving 
the rest of the field behind, which may not be 
good for the sport, but is a testament to 
Ferrari’s mastery of the technology. The Ferrari 
Formula One team is the most famous, the 
oldest, and most successful team in Grand Prix 


computation of fluid dynamics to determine 
wind flow and optimise the aerodynamics of 
the race car; to simulate complex engine 
behaviour in conditions of a race; to optimise 
engine performance; and for telemetry analysis. 

In Maranello, the famous “Galleria del 
Vento”, or Wind Tunnel, designed by Renzo 
Piano, is equipped with the most modern data 
acquisition systems, and highly sophisticated 
force measuring systems in the world. Linux 
clusters running on hundreds of AMD Opteron 
64-bit nodes are used by Ferrari engineers to 
simulate and analyze the performance of 
Ferrari’s F1 cars in all weather conditions, on 
the wide variety of tracks and surfaces used by 
Formula One. Adjustment of the aerodynamics 
of cars are affected not just by speed on the 
straights, but by the cornering characteristics of 
the cars on every corner of every race track on 
the calendar. 

“Simulation and analysis of our single-seat 
cars in the Wind Tunnel are key steps both in 
the designing and development phases”, said 
Antonio Calabrese, one of Ferrari’s IT managers. 
"Considering the amount of data we gathered 
and the time constraints we face the 
technology is helping us process data 
information faster and react much more 
quickly.” 


TELEMETRY 

With the restrictions enforced upon the teams 
as a result of new rules and regulations, 
simulations and telemetry data analysis are now 
key elements for the Ferrari Team when it 
comes to planning race strategy. The Ferrari 


Schumacher has won five 


Championships with Ferrari 


motor racing. The team has now won 14 
Constructor’s Championships, and Schumacher 
has won five of his seven Driver's 
Championships with Ferrari. 


A GALLERY OF WIND 

Much of the recent success of Maranello can be 
attributed to the efficient use of the 
comprehensive technologies that are applied to 
the science of building a race car. Most of the 
technology is powered by clusters of Opteron 
64-bit processors driven by SuSE Linux, which 
are used for simulation and calculation in the 
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engineers depend upon reliable, accurate and 
prompt data, not just at the design stage in the 
factory where next year's car is being 
developed, but on the track during a race, 
when data is transmitted back to the pits from 
the race cars, and is used to determine race-day 
strategy and the timing of pit stops. 

“Good planning and tactics make all the 
difference”, says Ross Braun, Ferrari Formula 
One Technical Director. “On the race track, the 
faster we can analyze telemetry data and 
discuss car and driver's performances, the 
better we can plan the race.” The data is 


collected on a Linux cluster, and is transmitted 
to 64-bit laptops that still run Windows. “But 
we are working on this”, says, Gianluca 
Degliesposti, Director Business Development, 
EMEA, for AMD, laughing. 

Roberto Casolari, an IT manager at Ferrari, 
explains: “The telemetry gives all kinds of 
information from the basic working parameters 
of the engine (RPM, throttle, temperatures, fuel 
level) to the positions of the various switches 
on the steering wheel... Ali the information 
coming in is distributed to the telemetry 
modules or laptop PCs. The engineers then 
process the data and decide on the appropriate 
course of action.” 

Massimo Pancini, also an IT manager for 
Ferrari, elaborates: “There are different kinds of 
analysis, which we can put into two main 
groups. The first is for monitoring the 
parameters of the car while it is running in 
order to prevent possible problems or to make 
small set-up changes (as allowed by the rules). 
The second group is the medium/long term 
analysis used to identify trends in the car's 
behavior or to simulate certain aspects of the 
car’s performance in future races... Practically 
everything in the car is shown in the telemetry: 
the engine, the aerodynamic values, so that at 
any time you know everything that is 
happening in the car. Therefore, you can 
immediately see if anything is going wrang or 
the areas that need improvement. If you see a 
problem you can ask the driver to handle the 
car in a certain way in order to reduce the 
effect of the problem and bring the car safely 
to the end of the race. In addition, historical 
data gives us a good base from which to see 
how various aspects of the car are changing.” 


CHOOSING LINUX 

The Linux clusters have replaced legacy 
systems running on Alpha chips. Linux is widely 
used in Formula One. AMD do similar work 
with the Sauber team and others, and BMW/ 
Williams employ a Linux solution for data 
analysis that has been provided by HP. Linux is 
also used by the Ducatti motor cycle racing 
team. Linux is chosen for the usual reasons - 
reliability, cost and price/performance. Cost is a 
secondary consideration to performance, but 
must always influence the final decision. More 
important is the versatility of Linux, and its 
proven record for high-density clustering 
solutions, which at Ferrari entails more than 
500 nodes to a cluster. Linux on 64-bit Opteron 
processors has allowed AMD and Ferrari to 
build scalable solutions for a fast moving 
industry that demands a quick and versatile 
response to rapidly changing parameters. 
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@ Building Bridges 


Eighty per cent of the world’s population still has to work many months or years to afford a 


computer that can run the majority of modern, apparently free, software applications. 


Frederick Noronha reports on the efforts of Free Software advocates to bridge the digital divide 


nonexistent” 
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ot yet in his teens, Ramesh sat engrossed with xpaint, and seemed to understand something of 

gaview, One of a group of neighbourhood children, they gathered more out of curiosity as a 

container full of used computers was being shipped into a storehouse in a suburb of the Indian 
state of Goa. 

Beyond the nearby temple, the evening sun was setting. For the Goa Schools Computers Project team, 
getting in the used computers had been an uphill struggle, against bureaucracy and the law. One miner 

tory that evening as the 300+ computers were unloaded was the realisation that underpriviledged 
children took to the Linux desktop quite readily. 

“Please could you give us some (software program)? Will our schoo! get some computers too?” 
Ramesh’s friends wanted to know. 

Light at the end of the tunnel? Or just a mirage? Gaps between those who have access to the power of 
computing and those who don’t are wide, and the gaps are growing. Obtaining affordable hardware 
might initially seem like a good idea; but is only a small part of the problem. 

The ‘digital divide’ is often talked about, in a world that is already wrecked by so many other divides 
and iniqu ls this more serious and immediate than someone starving to death? Without going into 
that debate let's take a look at the rale that FLOSS (Free/Libre and Open Source Software) can play in this 


situation. Can Free Software bridge the growing divide in technology and computing that is experienced 
between rich and poor countries, and between the rich and the poor within countries? 


This issue has many dimensions. Cost is still the major barrier, and a Mount Everest-sized problem for 
anyone serious about the digital divide. Yohanes Nugroho (http://open source.or.id/~yohanes) of 
Bandung’s Institute of Technology in Indonesia puts it thus: “Developments in the South East Asia 
countries vary a lot. Here in Indonesia OSS is mostly used to fight piracy, by providing law cost software. 
Unlike in some parts of Asia (such as Thailand), where Microsoft and some other commercial comp 
create cheap versions of Windows and other products for the local market. This isn’t happening in 
Indonesia, so we are faced with software that is prohibitively expensive.” 

The GNU Project lists ‘four freectoms’ - offering users the right to run, study, reclistribute and improve a 
software program. Perhaps it’s time to ask for a ‘fifth freedom’, one that ensures users are not excluded just 
because they can’t afford the cover price of the software. 

“Affordable” is a relative term. “The price of a typical, basic proprietary tool-set required for any ICT 
infrastructure, Windows XP together with Office XP, is US$560 in the U.S. This is over 2.5 months of GDP/ 
capita in South Africa and over 16 months of GDP/capita in Vietnam,” says a study by the Netherlands- 
based Rishal Aiyer Ghosh. ; 

Take the case of India. With a GDP (per capita) of US$462 per year, the country has a piracy level of 70 
per cent. In terms of local purchasing power. !t would take 14.5 months for an average Indian to earn 
enough to buy the software to run an average computer at international market rates. 

In 2003, Aiyer Ghosh prepared a table for First Monday that compared the US$560 cost of a single 
Windows + Office licence to GDP/capita for 176 countries. He notes that: “Not surprisingly, the higher this 
effective cost, the higher the BSA-estimated piracy rate.” 
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TOO MUCH FAT? 

Many computers defined as obsolete are in perfect working order. But the 
pressure to upgrade is enormous. Software is phased out, rendered obsolete, 
and is no longer supported. Hardware becomes unserviceable as compatible 
components are no longer manufactured. Shipping redundant computers to 
the Third World isn’t much of a solution; as they quickly turn redundant in the 
developing world too. 

Can software work to extend the life of redundant computers? Sirtaj Singh 
Kang's contributions to KDE include an image viewer. He also wrote the API 
documentation generator and “a lot of little things which | believe are still 
useful to KDE developers and users”. In Bangalore, two or three years ago, 
Sirtaj’s attention was drawn to the fact that hardware is still a major stumbling 
block for many in the Third World. Sirtaj decided that a ‘KDE Lite’ might be 
an option for those needing their software to run on older, leaner hardware. 
In the so-called developed world, where hardware is not an issue, many 
people may be oblivious to the value of this proposition. 

Is GNU/Linux also going the bloatware way? K Raghu Prasad explains: 
“This perception is due to an ongoing effort from GNU/Linux distros to please 
or convert Windows users into its fold. It makes a lot of business sense. Unless 
a Windows user finds the system user friendly by his own definition, he is not 
going to use Red Hat or SuSE distros. Changes come with additional costs. If 
you want all the bells and whistles of the latest KDE and GNOME, you have to 
spend a lot of CPU power and RAM.” Prasad’s way out is to look to other, 
lighter options. 


“Everyone should 
and we need fo free the 


- Yutaka Niibe 


But there are other ways of tackling such problems. Marco Fioretti is 
behind the RULE (Run Up2date Linux Everywhere) project. For some time 
now his goal has been to modify the Red Hat Linux installer so that “it runs in 
less than 32 MB of RAM, or create a new one if needed”. Fioretti told this 
writer in an e-m 


interview, that: “we NEED more developers and more user 
feedback, particularly when it comes to localisation, packaging, and post 
install customisation. We also need more non-technical feedback (talking 
about school needs, etc.. from people already involved in those activities),” 

Fioretti disagrees with the “hardware is cheap today, so why bother” view. 
He points out that eighty per cent of the world’s population still has to work 
many months or years to afford a computer that can run the majority of 
modern, apparently free, software applications. 


FREEDOM AND COST 

Does Free Software offer a solution to the iniquities of the 
Niranjan Rajani, originally from Pakistan, but now based in Finland, headed a 
study for Helsinki’s Ministry for Foreign Affairs on the significance of FLOSS for 
“developing” countries. Rajani told this correspondent that he has no doubts 
that FLOSS has a “special relevance” to the resource-poor but talent-rich Third 
World. “It’s extremely relevant,” he says. “Take the example of education. In 
terms of computer education, FLOSS has no match. Nothing else provides as 
much value to learners as FLOSS does. You're free to tinker with the code, Not 
only that, you can get in touch with the people who wrote the code and ask 
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why this or that was done in a particular way.” 

Rajani points to other benefits: You have a well established community of 
coders around the world, which doesn’t discriminate against you in any way. 
FLOSS also offers low entry barriers, and massive reductions in cost. 

Examples on the ground are making the same point. In Thailand, a low- 
cost PC project initiated by the Ministry of ICT “had a good impact on 
hardware and software pricing as a whole”, says Dr. Virach Sornlertlamvanich 
of the Thai Computational Linguistics Laboratory. “The main purpose of the 
project”, he says, “is to widen the PC user-base and to provide information 
accessibility opportunities for all.” 

Dr. Nah and Colin Charles have compiled free end-user training materials 
to enable GNU/Linux migrations, that have been published under the 
auspices of IOSN (the International Open Source Network). IOSN is 
supported by UNDP's Asia Pacific Development Information Programme. The 
materials are released under the Creative Commons Attribution license. 


GOOD MORNING, VIETNAM 

Dr. Pham Hong Quang of Vietnam’s Academy of Science and Technology 
recounts that: “Some years ago, we developed an application in Windows OS 
for Vietnamese users. Just managing a solution that allows you to type in a 
Vietnamese character and get it displayed took ten years. The best Vietnamese 
software companies were involved in this work. Microsoft changed their OS 
and application, and we had to run after them. We could not develop a 
solution on UNIX because the hardware and software was too expensive,” 

From 1997, Vietnam began to work with FLOSS. “It opened new 
opportunities for us,” says Dr Quang. At little expense, they were able to build 
Vietnam’s first high-performance computer, which meant an expensive Cray 
Was not needed to run the high-resolution modelling for everyday hydro- 
meleological forecasts. 

This system still runs the unique numerical prediction system of the 
Vietnamese HydroMet government centre. Techies there have also converted 
a full suite of Open Source Office tools ta run with the Vietnamese character 
set, and are building embedded systems with FLOSS. 

“Open Source give us the opportunities to learn from the experiences of 
other developments”, says Dr. Quang. We can change and adapt IT solutions 
to our specific needs. For less affluent countries, especially the non English- 
speaking areas, there is a large amount of adaption to be done, to push 
digital tools into daily life. Companies from abroad cannot earn much profit 
working on these changes. So we have to do the work ourselves, step by step, 
but fast enough to keep pace with global trends. Open Source helps us to do 
this, and gives us a chance of crossing the ‘digital divide’. Local ing IT opens 


Deploying used computer: ly seems like a good idea. But should the computers be so 


wantonly abandoned in the first place? Project workers and volunteers dawnload computers 
from a container, at a Third World destination 


“Most of these 
schools are 


igh-schdols, so 


eed lots of 
Gi gates 


IS 
msanouk 
> Somsano 


other doors - education, business and others. Only when the poor benefit 
from IT can you talk about the price.” 

Tony Bailetti, who is active on the Elearn-OpenSource network run by 
UNESCO, says that: “FLOSS increases the motivation to collaborate and 
lowers the cost of collaboration between individuals in different sides of the 
economic divide. This accelerates technology transfer and enables individuals 
in developing countries to be true partners in software development.” 

Bailetti argues that FLOSS moves “wealth creation” from being 
concentrated in the location where the software is designed and developed to 
the many locations where the software Is expanded, maintained and 
supported. FLOSS reduces costly imports, freeing up scarce hard currency. It 
enables individuals to act locally, while thinking globally. 
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IN South Korea, Soon-Son “Shawn” Kwon, who's actively involved in Korean 
translations, says: “I think the biggest impact of Linux/Open Source is the 
easier access to technologies which were mostly proprietary.” 

Pamela McLean is a CawdNet volunteer networking in rural Nigeria and 
within the virtual communities of the Internet, She tries to “share Good Ideas 
with my friends back in Ago-Are and Oke-Ogun (Nigeria).” 

She says: “I first offered the idea of FLOSS (Linux) in 2001, when it was 
completely rejected. A taste of FLOSS was offered again later, in 2002, when | 
gave a laptop to David Mutua, the project manager, with OpenOffice on it - 
but it wasn't really taken up. Later, after the InfoCentre opened in 2003 David 
was given OpenOffice by a contact in Ibadan. But the InfoCentre computers 
had Microsoft Office on them, and that is what the staff had been taught on 
their short training course in Ibadan. So that is what people in Ago-Are started 
to learn as well. Now we have Gbenga Sesan and his team taking FLOSS to 
Ago-Are, It was obviously well received. | have already had two emails back 
from young people in Ago-Are in support of what he is doing.” 

George Easaw, professor in mechanical engineering at Goa Engineering 
College (India) and a FLOSS evangelist, says: “In the technical sense, FLOSS 
has a lot of software in the public domain, such as octave (numerical 
computation software), gnuplot, latex, scilab etc.. The equivalent proprietary 
software, called MATLAB (for numerical computation) costs hundreds of 
thousands of rupees, though only marginally superior. This way, FLOSS is 
helping bridge the divide between the technical institutes which are rich and 
full of resources, and the have-nots.” 

K Raghu Prasad, of India; says: “What's of interest is the open standard of 
document formats available in free/libre word processor and spreadsheet 
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software. This is very important not only for the rural public, but also for the 


urban masses. With an open standard based document repository, your 
knowledge base is never going to be obsolete. That means you need not 
indulge in expensive data conversion tasks every year, or pay through the 
nose to get new versions of compatible software.” 
Currently, the Government of Laos is working to promote e-learning in an 

open source environment, among schools that received donated second- 

| hand computers from the UNDP or other institutions. “Most of these schools 
are secondary or high-schools, so they need lots of Free Software. | think that 
Free is good,” says Somsanouk Pathumvan, who works for the National 

| University of Laos. 


| “IT isn’t for the rich any more; it should be for everyone. Everyone should 
the benefit from technology, and we need to free the software to do that,” says 
Japanese Free Software campaigner Yutaka Niibe. Japan’s Free Software 
network sees FLOSS offering a “good alternative” for the not-so-affluent in an 
affluent society - local governments, SMEs (small and medium enterprises) 
and schools that are only now introducing IT. 
Niibe believes: “With Free/Libre and Open Source Software, many people 
can cooperate to get more fruits. For the short term, proprietary software 
offers better solutions, and bigger revenue. For the long term, FLOSS offers 


Yohanes Nugroho (http://open source.os.id/~yohanes) of Bandung's Institute of Technology 
in Indonesia: “indonesia is stilt facing a fot of problems. Currently the most important are 
regarding the economy and stability. Bridging the digital divide using OSS is currently not 
our main focus, Our telecommunication infrastructure is still very weak. It’s hard to 
connect our 16,000 islands (that make up this country). The educational tevel of most 
people ts stilt very low." 
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better solutions as well as a whole structure of society (more power to the 


people). In Asia, there are many ethnic groups, cultures, and languages. | 
believe FLOSS is for us.” 


Ashish Kotamkar who works with Indian-language solutions from the central 
Indian city of Pune, points out that “there are larger issues to bridging the 
digital divide than just FLOSS (or IT for that matter). We are talking about 
breaking the socio-economic barriers that have existed over centuries and 
about creating a level-playing field. Access to information and opportunities 
to the underprivileged is one of the ways to march towards this, and IT is just 
a tool in making it (access to info) happen. The choice of the right IT tool 
{and not necessarily the most advanced technologically) is extremely 
important.” 

Kotamkar suggests that FLOSS comes into the picture only “much later” 
when you encounter issues like cost, or freedom to develop and deploy 
applications, “| feel FLOSS will require the desired user-friendliness and 
necessary support structure in place for it to make the desired impact at the 
grassroots level. it needs to go beyond labs and geeks and must keep in mind 
the ground realities,” he says. “This kind of human infrastructure can come in 
place only if there are larger schemes and projects implemented by the state 
and society aimed at achieving just this.” 

Says Nugroho from Bandung, cited above: “Indonesia is still facing a lot of 
problems. Currently the most important are regarding the economy and 
stability. Bridging the digital divide using OSS is currently not our main focus. 
Our telecommunication infrastructure is still very weak. It’s hard to connect 
our 16,000 islands (that make up this country). The educational level of most 
people is still very low.” 

Chen Shunling, a young lawyer studying the intersection between FLOSS 
and the law in Taiwan, says that: “The digital divide is not just about 
technology, but also about all other kinds of divides - wealth, age, gender, the 
city and the countryside, the majority population and the minorities. I’m not 
optimistic that FLOSS itself could go very far in bridging the digital divide, 
which will remain if other divides are not bridged. | don’t mean that it cannot 
help at all, but for people who don’t read cade, the influences are quite 


your well 


limited. But I’m very positive on the influences it might have on 
programmers.” 

However, Shunling believes that the ideas behind FLOSS will generate 
“very interesting possibilities”. On the legal sicle, she sees it forcing society to 
re-evaluate “Intellectual Property” law. “FLOSS is showing the world that you 
can refuse the default option offered by the system, and work out something 
with other people, which might be a better way of doing things. The 
influence of open source on other fields is what | consider most valuable. The 
idea that knowledge has been created with the efforts of people who lived in 
different times. The idea that knowledge should be understood by people 
who use it. The idea that people are entitled to create things for themselves, 
and to contribute to others.” 


Linux doesn't seem to be doing anything in particular to bridge the gender gap 
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Andy Hertzfeld, one of the co-creators of the Macintosh computer, wrote “Paul Graham is a 


hacker, a painter, and a terrific writer. His lucid, humorous prose is brimming with contrarian 


insight and practical wisdom on writing great code at the intersection of art, science, and 


commerce.” Here, we reproduce Graham's classic essay on the relationship between the artist, 


the hacker and the wish to make good things 


When | finished grad school in computer science | went to art school 
to study painting. A lot of people seemed surprised that someone 
interested in computers would also be interested in painting. They 
seemed to think that hacking and painting were very different kinds 
of work - that hacking was cold, precise, and methodical, and that 
painting was the frenzied expression of some primal urge. Both of 
these images are wrong, Hacking and painting have a lot in common. 
In fact, of all the different types of people I've known, hackers and 
painters are among the most alike. 

What hackers and painters have in common is that they’re both 
makers. Along with composers, architects, and writers, what hackers 
and painters are trying to do is make good things. They're not doing 
research per se, though if in the course of trying to make good things 
they discover some new technique, so much the better. 


ve never liked the term ‘computer science.’ The main reason | don’t like it 
is that there’s no such thing. Computer science is a grab bag of tenuously 
related areas thrown together by an accident of history, like Yugoslavia, At 
one end you have people who are really mathematicians, but call what 
they’re doing computer science so they can get DARPA grants. In the 
middle you have people working on something like the naturai history of 
computers - studying the behaviour of algorithms for routing data 
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through networks, for example. And then at the other extreme you have 
the hackers, who are trying to write interesting software, and for whom 
computers are just a medium of expression, as concrete is for architects or 
paint for painters. It’s as if mathematicians, physicists, and architects all 
had to be in the same department. 

Sometimes what the hackers do is called ‘software engineering,’ but 
this term is just as misleading. Good software designers are no more 
engineers than architects are. The border between architecture and 
engineering is not sharply defined, but it’s there. It falls between what and 
how: architects decide what ta do, and engineers figure out how to do it. 
What and how should not be kept too separate. You're asking for trouble 
if you try to decide what to do without understanding how to do it. But 
hacking can certainly be more than just deciding how to implement some 
spec. At its best, it’s creating the spec - though it turns out the best way to 
do that is to implement it. 


Perhaps one day ‘computer science’ wi 


ike Yugoslavia, get broken up 
into its component parts. That might be a good thing. Especi 
meant independence for my native land, hacking. Bundling all these 


different types of work together in one department may be convenient 
administratively, but it’s confusing intellectually. That’s the other reason | 
don’t like the name ‘computer science,’ Arguably the people in the middle 


are doing something like an experimental science. But the people at either 
end, the hackers and the mathematicians, are not actually doing science. 
The mathematicians don’t seem bothered by this. They happily set to 
work proving theorems like the other mathematicians over in the math 
department, and probably soon stop noticing that the building they work 
in says ‘computer science’ on the outside. But for the hackers this label is a 
problem. If what they’re doing is called science, it makes them feel they 
ought to be acting scientific. So instead of doing what they really want to 
do, which is to design beautiful software, hackers in universities and 
research labs feel they ought to be writing research Papers. 
) In the best case, the papers are just a formality. Hackers 
write cool software, and then write a paper about it, and the 
Paper becomes a proxy for the achievement represented by 
the software. But often this mismatch causes problems. It’s easy to 
drift away from building beautiful things toward building ugly things 
that make more suitable subjects for research papers. 
Unfortunately, beautiful things don’t always make the best subjects 
for papers. Number one, research must be original - and as anyone who 
has written a PhD dissertation knows, the way to be sure that you're 
exploring virgin territory is to to stake out a piece of ground that no one 
wants. Number two, research must be substantial - and awkward systems 
yield meatier papers, because you can write about the obstacles you have 
to overcome in order ta get things done. Nothing yields meaty problems 
like starting with the wrong assumptions, Most of Al is an example of this 
rule; if you assume that knowledge can be represented as a list of 
predicate logic expressions whose arguments represent abstract concepts, 
you'll have a lot of papers to write about how to make this work. As Ricky 
Ricardo used to say, “Lucy, you've gat a lot of explaining to do.” 
The way to create something beautiful is often to make subtle tweaks to 
something that already exists, or to combine existing ideas in a slightly 
new way. This kind of work is hard to convey in a research Paper. 


So why do universities and research labs continue to judge hackers by 
publications? For the same reason that ‘scholastic aptitude’ gets measured 
by simple-minded standardised tests, or the productivity of programmers 
gets measured in lines of code. 
These tests are easy to apply, and 
there is nothing so tempting as an 
easy test that kind of works. 

Measuring what hackers are 
actually trying to do, designing 
beautiful software, would be much 
more difficult. You need a good 
sense of design to judge good design. And there is no correlation, except 
possibly a negative one, between people's ability to recognise good design 
and their confidence that they can. The only external test is time. Over 
time, beautiful things tend to thrive, and ugly things tend to get 
discarded. Unfortunately, the amounts of time involved can be longer than 
human lifetimes. Samuel Johnson said it took a hundred years for a writer's 
reputation to converge. You have to wait for the writer’s influential friends 
to die, and then for all their followers to die. 

I think hackers just have to resign themselves to having a large 
random component in their reputations. In this they are no 
different from other makers. In fact, they’re lucky by 
comparison. The influence of fashion is not nearly so great in 
hacking as it is in painting. 


There are worse things than having people misunderstand 
your work, A worse danger is that you will yourself 


Computer science is a grab bag of 
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misunderstand your work. Related fields are where you go 
looking for ideas, if you find yourself in the computer 
science department, there is a natural temptation to 
believe, for example, that hacking is the applied version 
of what theoretical computer science is the theory of. All 
the time | was in graduate school | had an 
uncomfortable feeling in the back of my mind ° 
that | ought to know more theory, and that it 
was very remiss of me to have forgotten all 
that stuff within three weeks of the final exam. 
Now | realise | was mistaken. Hackers need to 
understand the theory of computation about as much as painters need to 
understand paint chemistry. You need to know how to calculate time and 
space complexity and about Turing completeness. You might also want to 
remember at least the concept of a state machine, in case you have to 


write a parser or a regular expression library. Painters in fact have to 
remember a good deal more about paint chemistry than that. I’ve found 
that the best sources of ideas are not the other fields that have the word 
‘computer’ in their names, but the other fields inhabited by makers. 
Painting has been a much richer source of ideas than the theory of 
computation. 

For example, | was taught in college that one ought to figure out a 
program completely on paper before even going near a computer. | found 
that | did not program this way. | found that | liked to program sitting in 
front of a computer, not a piece of paper. Worse still, instead of patiently 
writing out a complete program and assuring myself it was correct, | 
tended to just spew out code that was hopelessly broken, and gradually 
beat it into shape. Debugging, | was taught, was a kind of final pass where 
you caught typos and oversights. The way | worked, it seemed like 
programming consisted of debugging. 

For a long time | felt bad about this, just as | once felt bad that | didn‘t 
hold my pencil the way they taught me to in elementary school. If | had 
only looked over at the other makers, the painters or the architects, | 
would have realised that there was a name for what | was doing: 
sketching. As far as | can tell, the way they taught me to program in 
college was all wrong. You should 
figure out programs as you’re 
writing them, just as writers and 
painters and architects do. 

Realising this has real 
implications for software design. It 
means that a programming 
language should, above all, be 
malleable. A programming language is for thinking of programs, not for 
expressing programs you've already thought of. It should be a pencil, not 
a pen. Static typing would be a fine idea if people actually did write 
programs the way they taught me to in college. But that’s not how any of 
the hackers | know write programs. We need a language that lets us 
scribble and smudge and smear, not a language where you have to sit 
with a teacup of types balanced on your knee and make polite 
conversation with a strict old aunt of a compiler. 


While we're on the subject of static typing, identifying with the 
makers will save us from another problem that afflicts the 
sciences: math envy. Everyone in the sciences secretly believes 
that mathematicians are smarter than they are. | think 
mathematicians also believe this. At any rate, the result is 
that scientists tend to make their work look as 
mathematical as possible. In a field like physics this 
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probably doesn’t do much harm, but the further you get from the natural 
sciences, the more of a problem it becomes. 

A page of formulae just looks so impressive. (Tip: for extra 
impressiveness, use Greek variables.) And so there is a great temptation to 
work on problems you can treat formally, rather than problems that are, 
say, important. If hackers identified with other makers, like writers and 
painters, they wouldn't feel tempted to do this. Writers and painters don’t 
suffer from math envy. They feel as if they‘re doing something completely 
unrelated. So are hackers, | think. 


If universities and research labs keep hackers 
from doing the kind of work they want to 
do, perhaps the place for them is in 
companies. Unfortunately, most companies 
won't let hackers do what they want either. 
Universities and research labs force hackers 


to be scientists, and companies force them 


to be engineers. 
| only discovered this myself quite recently. When 
Yahoo bought Viaweb, they asked me what | wanted to do. | 
had never liked the business side very much, and said that | just 
wanted to hack. When | got to Yahoo, | found that what hacking meant to 
them was implementing software, not designing it. Programmers were 
seen as technicians who translated the 
visions (if that is the word) of product 
managers into code. 

This seems to be the default plan in big 
companies. They do it because it decreases 
the standard deviation of the outcome. 
Only a small percentage of hackers can 
actually design software, and it's hard for 
the people running a company to pick these out. So instead of entrusting 
the future of the software to one bri 
up so that it is designed by committee, and the hackers merely implement 


nt hacker, most companies set things 


the design. 

If you want to make money at some point, remember this, because this 
is one of the reasons startups win. Big companies want to decrease the 
standard deviation of design outcomes because they want to avoid 
disasters. But when you damp oscillations, you lose the high points as well 
as the low. This is not a problem for big companies, because they don’t 
win by making great products. Big companies win by sucking less than 
other big companies. 

So if you can figure out a way to get in a design war with a company 
big enough that its software is designed by product managers, they'll 


never be able to keep up with you. These opportunities are not easy ta 
find, though. It’s hard to engage a big company in a design war, just as it’s 
hard to engage an opponent inside a castle in hand to hand combat. It 
would be pretty easy to write a better word processor than Microsoft 
Word, for example, but Microsoft, within the castle of their operating 


system monopoly, probably wouldn’t even notice if you did. 


The place to fight design wars is in new markets, where no one has yet 
managed to establish any fortifications. That's where you can win big by 
taking the bold approach to design, and having the same people both 
design and implement the product. Microsoft themselves did this at the 
start. So did Apple. And Hewlett-Packard. | suspect almost every successful 
startup has. 


So one way to build great software is to start your own startup. There are 
two problems with this, though. One is that in a startup you have to do so 
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much besides write software. At Viaweb | considered myself lucky if | got 
to hack a quarter of the time. And the things | had to do the other three 
quarters of the time ranged from tedious to terrifying. | have a benchmark 
for this, because | once had to leave a board meeting to have some 


cavities filled. | remember sitting back in the dentist’s chair, waiting for the 


and feeling like | was on vacation. 

The other problem with startups is that there is not much overlap 
between the kind of software that makes money and the kind that’s 
interesting to write. Programming languages are interesting to write, and 
Microsoft's first product was one, in fact, but no one will pay for 
programming languages now. If you want to make money, you tend to be 
forced to work on problems that are too nasty for anyone to solve for free. 

All makers face this problem. Prices are determined by supply and 
demand, and there is just not as much demand for things that are fun to 
work on as there is for things that solve the mundane problems of 
individual customers. Acting in off-Broadway plays just doesn’t pay as well 
as wearing a gorilla suit in someone's booth at a trade show. Writing 


novels doesn’t pay as well as writing ad copy for garbage disposals. And 
hacking programming languages doesn’t pay as well as figuring out how 


to connect some company’s legacy database to their Web server. 


| think the answer to this problem, in the case of software, is a concept 
known to nearly all makers: the day job. This phrase began with 
musicians, who perform at night. More 
generally, it means that you have one kind 
of work you do for money, and another for 
love. Nearly all makers have day jobs early 
in their careers. Painters and writers 
notoriously do. If you're lucky you can get 
a day job that’s closely related to your real 
work. Musicians often seem to work in 
record stores. A hacker working on some programming language or 
operating system might likewise be able to get a day job using it. (The 
greatest damage that photography has done to painting may be the fact 
that it killed the best day job. Most of the great painters in history 
supported themselves by painting portraits.) 

When | say that the answer is for hackers to have day 
jobs, and work on beautiful software on the side, I’m 
not proposing this as a new idea. This is what 
open-source hacking is all about. What I’m saying 
is that open-source is probably the right model, 
because it has been independently confirmed by 
all the other makers. 

It seems surprising to me that any 
employer would be reluctant to let hackers 
work on open-source projects. At Viaweb, 
we would have been reluctant to hire 
anyone who didn’t. When we interviewed 
programmers, the main thing we cared about 
was what kind of software they wrote in their spare time. You can’t do 
anything really well uniess you love it, and if you love to hack you’ll 
inevitably be working on projects of your own. (I’ve been told that 
Microsoft discourages employees from contributing to open-source 
projects, even in their spare time. But so many of the best hackers work on 
open-source projects now that the main effect of this policy may be to 
ensure that they won't be able to hire any first-rate programmers.) 


Because hackers are makers rather than scientists, the right place to look 
for metaphors is not in the sciences, but among other kinds of makers. 


“tt would have seemed very add to people at the time that Federico da 


Montefeftro, the Duke of Urbino, would one day be known mostly as the 


guy with the strange nose in a painting by Piero della Francesca” 
Paul Graham 
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Everyone in the sciences secretly 
believes that mathematicians are 
smarter than they are 


What else can painting teach us about hacking? One thing we can learn, 
or at least confirm, from the example of painting is how to learn to hack. 
You learn to paint mostly by doing it. Ditto for hacking. Most hackers 
don’t learn to hack by taking college courses in programming. 

They learn to hack by writing programs of their own at age 

thirteen. Even in college classes, you learn to hack mostly by 
hacking. (What you learn about programming in college is much 

like what you learn about books or clothes or dating: what bad 

taste you had in high school.) 

Because painters leave a trail of work behind them, 
you can watch them learn by doing. If you look at 
the work of a painter in chronological order, you'll 
find that each painting builds on things that have 
been learnt in previous ones. When there's 
something in a painting that works very well, you can 
usually find version one of it in a smaller form in some earlier painting. 
I think most makers work this way. Writers and architects seem to as 
well. Maybe it would be good for hackers to act more like painters, and 
regularly start over from scratch, instead of continuing to work for 
years on one project, and trying to incorporate all their later ideas as 
revisions. 

The fact that hackers learn to hack by doing it is another sign of how 
different hacking is from the sciences, Scientists don’t learn science by 
doing it, but by doing labs and problem sets. Scientists start out doing 
work that’s perfect, in the sense that they're just trying to reproduce 
work someone else has already done for them. Eventually, they get to 
the point where they can do original work. Whereas hackers, from the 
start, are doing original work; it’s just very bad. So hackers start 
original, and get good, and scientists start good, and get original. 


The other way makers learn is from examples. For a painter, a museum 
is a reference library of techniques. For hundreds of years it has been 
part of the traditional education of painters to copy the works of the 
great masters, because 
copying forces you to look 
closely at the way a painting 
is made. Writers do this too. 
Benjamin Franklin learnt to 
write by summarising the 
points in the essays of 
Addison and Steele and 
then trying to reproduce 
them. Raymond 
Chandler did the same thing with detective stories. 
Hackers, likewise, can learn to program by looking at good 


programs - not just at what they do, but the source 
code too. One of the less publicised benefits of the 
open-source movement is that it has made it easier 
to learn to program. When | learnt to program, we 
had to rely mostly on examples in books. The 
one big chunk of code available then was 
Unix, but even this was not open source. 
Most of the people who read the source read 
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There is not much overlap between the 
kind of software that makes money and 
the kind that’s interesting to write 


it in illicit photocopies of John Lions’ book, which though written in 
1977 was not allowed to be published until 1996. 


Another example we can take from painting is the way that paintings are 
created by gradual refinement. Paintings usually begin with a sketch. 
Gradually the details get filled in, But it is not merely a process of 


Sometimes the original plans turn out to be mistaken. Countless paintings, 
when you look at them in X-rays, turn out to have limbs that 
have been moved or facial features that have been 
readjusted. 
Here’s a case where we can learn from painting. | think 
hacking should work this way too. It’s unrealistic to 
expect that the specifications for a program will be 


perfect. You're better off if you admit this up front, 
and write programs in a way that allows 
specifications to change on the fly. (The structure of 
large companies makes this hard for them to do, so 
here is another place where startups have an advantage.) 
Everyone by now presumably knows about the danger of 
premature optimisation. | think we should be just as worried about 
premature design - deciding too early what a program should do. The 
right tools can help us avoid this danger. A good programming language 
should, like oil paint, make it easy to change your mind. Dynamic typing is 
a win here because you don’t have to commit to specific data 
y, I think, is to make the 
language very abstract. The easiest program to change is one that’s very 
short. 
This sounds like a paradox, but a great painting has to be better than it 


representations up front. But the key to flex 


has to be. For example, when Leonardo painted the portrait of Ginevra de 
Benci in the National Gallery, he put a juniper bush behind her head. In it 
he carefully painted each individual leaf. Many painters might have 
thought, this is just something to put in the background to frame her 
head. No one will look that closely at it. 

Not Leonardo. How hard he worked on part of a painting didn’t 
depend at all on how closely he expected anyone to look at it. He was like 
Michael Jordan. Relentless. 

Relentlessness wins because, in the aggregate, unseen details become 
visible. When people walk by the portrait of Ginevra de Benci, their 
attention is often immediately arrested by it, even before they look at the 
label and notice that it says 
Leonardo da Vinci. All those 
unseen details combine to 
produce something that’s just 
stunning, like a thousand 
barely audible voices all 
singing in tune. 

Great software, likewise, 
requires a fanatical devotion to 
beauty. If you look inside good 
software, you find that parts no one is ever supposed to see are beautiful too. 
I'm not claiming | write great software, but | know that when it comes to 
code | behave in a way that would make me eligible for prescription drugs if | 


approached everyday life the same way. It drives me crazy to see code that’s 
badly indented, or that uses ugly variable names. 


If a hacker were a mere implementor, turning a spec into code, then he 
could just work his way through it from one end to the other like someone 
digging a ditch. But if the hacker is a creator, we have to take inspiration 
into account. In hacking, like painting, work comes in cycles. Sometimes 


you get excited about some new project and you want to work sixteen 
hours a day on it. Other times nothing seems interesting. 

To do good work you have to take these cycles into account, because 
they're affected by how you react to them. When you're driving a car with 
@ manual transmission on a hill, you have to back off the clutch sometimes 
to avoid stalling. Backing off can likewise prevent ambition from stalling. 
In both painting and hacking there are some tasks that are terrifyingly 
ambitious, and others that are comfortingly routine. It’s a good idea to 
save some easy tasks for moments when you would otherwise stall 

In hacking, this can literally mean saving up bugs. | like debugging; it’s 
the one time that hacking is as straightforward as people think it is. You 
have a totally constrained problem, and all you have to do is solve it. Your 
program is supposed to do x. Instead it does y. Where does it go wrong? 
You know you're going to win in the end. It’s as relaxing as painting a wall. 

The example of painting can teach us not only how to manage our own 
work, but how to work together, A lot of the great art of the past is the 
work of multiple hands, though there may only be one name on the wall 
next to it in the museum. Leonardo was an apprentice in the workshop of 
Verrocchio and painted one of the angels in his Baptism of Christ. This sort 
of thing was the rule, not the exception. Michelangelo was considered 
especially dedicated for insisting on painting all the figures on the ceiling 
of the Sistine Chapel himself, As far as | know, when painters worked 
together on a painting, they never worked on the same Parts. It was 
common for the master to paint the principal figures and for assistants to 
paint the others and the background. But you never had one guy painting 
over the work of another. 


I think this is the right model for collaboration in software too. Dan‘t 


Hackers 


Hackers start original, and get 


and get original 


push it too far. When a piece of code is being hacked by three or four 
different people, no one of whom really owns it, it will end up being like a 
common-room, It will tend to feel bleak and abandoned, and accumulate 
cruft. The right way to collaborate, I think, is to divide projects into sharply 
defined modules, each with a definite owner, and with interfaces between 
them that are as carefully designed and, if possible, as articulated as 
programming languages. 


Like painting, most software is intended for a human audience. And so 
hackers, like painters, must have empathy to do really great work. You 
have to be able to see things from the user’s point of view. When | was a 
kid | was always being told to look at things from someone else's point of 
view. What this always meant in practice was to do what someone else 
wanted, instead of what | wanted. This of course gave empathy a bad 
name, and | made a point of not cultivating it. 

Boy, was | wrong. It turns out that looking at things from other people's 
point of view is practically the secret of success. It doesnt necessarily 
mean being self-sacrificing. Far from it. Understanding how someone else 
sees things doesn’t imply that you'll act in his interest; in some situations - 
in war, for example - you want to do exactly the opposite. 

(Here’s an example of applied empathy, At Viaweb, if we couldn’t 
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decide between two alternatives, we'd ask, what would our competitors 
hate most? At one point a competitor added a feature to their software 
that was basically useless, but since it was one of few they had that we 
didn’t, they made much of it in the trade press. We could have tried to 
explain that the feature was useless, but we decided it would annoy our 
competitor more if we just implemented it ourselves, so we hacked 
together our own version that afternoon.) 


Hackers start original, and get 
good - scientists start good, 
and get original 


Most makers make things for a human audience. And to engage an 
audience you have to understand what they need. Nearly all the greatest 
paintings are paintings of people, for example, because people are what 
people are interested in. Empathy is probably the single most important 
difference between a good hacker and a great one. Some hackers are 
quite smart, but when it comes to empathy are practically solipsists. It’s 
hard for such people to design great software, because they can’t see 
things from the user's point of view. (Except text editors and compilers. 
Hackers don’t need empathy to design these, because they are themselves 
typical users.) 

One way to tell how good people are at empathy is to watch them 
explain a technical question ta someone without a technical background. 
We probably all know people who, though otherwise smart, are just 
comically bad at this. If someone asks them at a dinner party what a 
programming language is, they'll say something like “Oh, a high-level 
language is what the compiler uses as input to generate 
object code.” High-level language? Compiler? Object 
code? Someone who doesn’t know what a 
programming language is obviously doesn’t know 
what these things are, either. 

Part of what software has to do is explain itself. So 
to write good software you have to understand how 
little users understand. They’re gaing to walk up to the 
software with no preparation, and it had better do what 
they guess it will, because they're not going to read the 
manual. The best system I’ve ever seen in this respect was 
the original Macintosh, in 1985. It did what software almost never does: it 
just worked, (Well, almost. They overshot the available RAM somewhat, 
causing much inconvenient disk swapping, but this could be fixed within 
a few months by buying an additional disk drive.) 

Source code, too, should explain itself. If | could get people to 
remember just one quote about programming, it would be the one at the 
beginning of Structure and Interpretation of Computer Programs. 
“Programs should be written for people to read, and only incidentally for 
machines to execute.” You need to have empathy not just for your users, 
but for your readers. It’s in your interest, because you'll be one of them. 
Many a hacker has written a program only to find on 

returning to it six months later that he has no idea 


how it works. | know several people who've sworn 
off Perl after such experiences. 
(The way to make programs easy to read is 
not to stuff them with comments. | would take 
Abelson and Sussman’s quote a step further. 
Programming languages should be designed 
to express algorithms, and only incidentally to 
tell computers how to execute them. A good 
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programming language ought to be better for explaining software than 
English. You should only need comments when there is some kind of 
kludge you need to warn readers about, just as on a road there are only 
arrows on parts with unexpectedly sharp curves.) 

Lack of empathy is associated with intelligence, to the point that there 
is even something of a fashion for it in some places. But | don’t think 
there’s any correlation. You can do well in math and the natural sciences 
without having to learn empathy, and people in these fields tend to be 
smart, so the two qualities have come to be associated. But there are 
plenty of dumb people who are bad at empathy too. Just listen to the 
people who call in with questions on talk shows. They ask whatever it is 
they’re asking in such a roundabout way that the hosts often have to 
rephrase the question for them. 

So, if hacking works like painting and writing, is it as cool? After all, you 
only get one life. You might as well spend it working on something great. 
Unfortunately, the question is hard to answer. There is always a big time 
lag in prestige. It’s like light from a distant star. Painting has prestige now 
because of great work people did five hundred years ago. At the time, no 
one thought these paintings were as important as we do today. It would 
have seemed very odd to people at the time that Federico da Montefeltro, 
the Duke of Urbino, would one day be known mostly as the guy with the 
strange nase in a painting by Piero della Francesca. 


Lack of empathy is associated with 
intelligence, to the point that there 
is even something of a fashion for it 


So while | admit that hacking doesn’t seem as cool as painting now, 
we should remember that painting itself didn’t seer as cool in its glory 
days as it does now. What we can say with some confidence is 

that these are the glory days of hacking. In most fields the 
great work is done early on. The paintings made between 
1430 and 1500 are still unsurpassed. Shakespeare appeared 
just as professional theatre was being born, and pushed 
the medium so far that every playwright since has 
had to live in his shadow. Albrecht Durer did the 
same thing with engraving, and Jane Austen with 
the novel. 
Over and over we see the same pattern. A new 
medium appears, and people are so excited about it that 
they explore most of its possibilities in the first couple generations. 
Hacking seems to be in this phase now. Painting was not, in Leonardo’s 
time, as cool as his work helped 


make it. How cool hacking turns out 
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to be will depend on what we can do 
with this new medium. In some 


ways, the time lag of coolness is an 
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advantage. When you meet someone 
now who is writing a compiler or 
hacking a Unix kernel, at least you 
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know they’re not just doing it to pick 
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Unravelling Helix i 


As interest increases in Linux as a media production toolkit, Jono Bacon explores the history 


and prospects of Helix and its potential as a cross-platform media player 


Getting 


n January 26th 1926 John Logie Baird 
successfully created the world 


5 first 
public television transmission. A pioneer 
in facsimile, fiber optics and radar, Logie Baird 
was a keen innevator when il came to 
technology, but his innovation in television was 
his most notable success. Back in the distant 
days of 1926 Logie Baird could never have 

nagined the ways in which the moving 
pictures that he had made possible would be 
used today. 

The Net was b 


formation, not au 


1 to handle text-based 

0 and video and other rich 
media. The invention of the World Wide Web by 
Tim Berners-Lee at CERN in the early nineties 
transformed the possibilities, but the first 
organisation to produce specific solutions for 
the creation, delivery and consumption of 
media via the internet was RealNetworks with 
the release of RealPlayer and RealAudio in 1995. 

Al Us point in the Internet timeline, the 


World Wide Web was a niche technology that 


. 


Real 


was young and still experiencing teething 

problems. For many, the World Wide Web was a 
World Wide Wail. The cut 
technologies of the time macle it difficult 


g edge 
enough to download static text and images at a 
salisfying speed, let alone weighty audio and 
video content. 
inovations made it possible to create a 

Means of streaming audio and viceo content to 
the viewer, despite the shortcomings of the 
media. The technique is akin to an egg timer - the 
content is gradually moved from one part to 
another via the narrow limitation of the container. 
The method worked well for the narrowhand 
Internet of the mid-nineties, and betore long, Real 
had a working implementation of its Realaucdio 
and Realvideo technologies. These technologies 
were eagerly snapped up by a media hungry user 

ase who were gradually getting faster and faster 
Intemet access. As narrowband gave way lo 
broadband the technologies refined, and Real 


were able to distribute high quafity content that 


ith Helix 


could be streamed across the internet with 
impressive results, 


UNRAVELLING HELIX 
Despite a history of innovation, Real suffered 
both from the protiferation of free alternatives, 
and from the aggressively monopolistic 
marketing of Ure Windows Media Player by 
Microsoft, which has been the subject of a 

ag by the European Commission. The apen 
source communily not only provided alternative 
Operating Systems provide a potential 
vehicle for Real technologies, but curing the 
-org boom, the philosophy and culture of Free 
Sofiware pushed the spotlight onto Real to get 
itself involved, or lose oul, Organisations were 
rapidly jumping onto the Linux ane Open 
Source bandwagon, and the huge press 
surrounding the donation of the Netscape code 
to the Open Source community created a 
potential opportunity for Real to cash in on this 


new phenomenon. Maybe open source code 
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“Real chose to adopt an open source 
model as it best served the needs of 
moving technology innovation forward, 
and empowering the global development 


community” - Dendi 


could help Real lower the cost of their 
application development, and bring in some 
much need publicity on the back of the hype 
about the open source revolution? 

On July 22nd 2002 Real announced the birth 
of the Helix project. Nestled inside the bluster 
and hyperbole of the press release, Real 
described the project as a “a new platform and 
community for the standardisation of digital 
media creation, delivery, and playback.” 
According to the enthusiastic prose, the platform 
wauld provide “the standard infrastructure to 
empower developers, IT companies and CE 
companies to drive the Internet media industry 
forward into the future.” In accordance with the 
press announcement, Real created a community 
development site at www. helixcommunity.org 
and released the existing Helix source code that 
had been developed over the previous eight 
years. The Open Source community jumped at 
the opportunity and fervent development began. 

Vikram Dendi, Program Manager responsible 
for the Helix platform, feels that Real made the 
right decision in going for an Open Source 
solution for Helix development. “RealNetworks 
recognized some years back that demand for 
the media products and services the company 
had pioneered was growing at a rate that the 
company’s own engineering resources could 
not keep up with. Real began investigating 
possible models that could enable its IP 
products to get into the hands and the 
development schedules of the individuals/ 
companies interested in integrating Real’s media 
products as part of their own market offerings,” 
he explains. “Real was in search of a model that 
would enable the company to strike the right 
balance between fostering innovation in Real’s 
technologies and enabling the company at the 
same time to continue to focus its efforts on 
providing services to the end user”. 

Although Dendi is confident that Real chose 
the Open Source road to apply better focus for 


its engineering capabilities and products, some 
cynics suggest that the real reason (no pun 
intended) for the company’s mave to Open 
Source was a means to bring more attention 
and focus to the company from the press. 
“Real chose to adopt an open source model 

as it best served the needs of moving 
technology and innovation forward, and 
empowering the global development 
community,” says Dendi. “This model 
ultimately equips individuals and organizations 
to help create the products that they truly 
want - the perfect media player, producer and 
server for their platform of choice”. 


THE HELIX PLATFORM 

Given the press coverage surrounding Helix, 
one would be entitled to assume that most 
people are familiar with the components of the 
Helix platform. Nonetheless, there is much 
ignorance of the project, which offers 
community members the opportunity to license 
the Helix DNA Client (the core Media engine) 
and the commercial RealAudio and RealVideo 
media formats. 

The Helix Player, the free open source media 
player which contains only open source 
components, and the Helix DNA Client are 
available under the GPL. The Helix DNA 
Producer and the Helix DNA Server are also 
available in source code form under the Real 
Public Source License (RPSL) and the Real 
Community Source License (RCSL). The RPSL is 
a traditional Open Source license that is certified 
by the Open Source Initiative, whereas the RCSL 
is a license that enables the commercial use of 


Helix. These different components essentially 
provide a a media player, streaming server and 
development framework for the project. 

The www. helixcommunity.org website, 
where the Helix code is maintained, is built with 
the GForge development platform. Developers 
can join the various projects taking place in the 


community and can take advantage of the 
typical development resources (CVS, mailing 
lists, etc.) which make it easier to get involved 
and to coordinate development within the 


community. This kind of development resource 
is certainly not a new phenomenon in the 
commercial sector, and Sun runs a similar set of 
resources for its Open Source projects. From a 
neutral perspective it is apparent that Real’s 
donation of a large chunk of code to the 
community is useful both to the community 
and to Real’s commercial prospects. 

Unfortunately there is a fly in the ointment 
of this picture. Although the Helix platform is 
open and flexible, the Realvideo and Realaudio 
codecs still carry restrictive commercial 
licenses. The primary purpose of the Helix 
platform is to provide the machinery around 
the codecs, but the codecs themselves are an 
entirely separate entity. 

According to Dendi: “The goal of the 
community is to provide developers and 
companies with access to an entire framework 
of media technologies. RealAudio and 
RealVideo are available as multi-platform 
codecs, as well as MPEG4 within the 
community.” Dendi also sees a massive 
potential for Open Source codecs, “Ogg Vorbis 
and Ogg Theora are available, and there are 
several open source codec initiatives underway. 
The tangled intellectual property situation 
makes it difficult to offer open source codecs”. 

The web of |P dependence is nothing new 
when it comes to software, but Real has not 
been forthcoming in explaining exactly what 
kind of IP problems may result if the company 
open sources its codecs. 

Despite the lack of open source Realvideo/ 
Realaudio codecs, the Helix Player developed 
within the community is focused on Open 
Source codec support and was one of the first 
media players to offer Theora support. The 
project worked closely with The Xiph 
Foundation to offer this support, and the 
relationship between Real and Xiph has been 
good - Xiph were one of the recipients of the 
Helix Community grant program in 2003. 


DETERMINING VALUE 

August 3rd 2004 was a key date in the history 
of the Helix project - the day that the Helix 
Player was officially unveiled. Real re-branded 
the product and presented it as RealPlayer 10 
for Linux and the wheels of the press began to 


“Both the Helix Player and the multi-format Real Players are 
free to the end user - like the Netscape/Mozilla model” - Dendi 
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roll. Since the release, a number of distributions 
have picked up the software and included it 
within their package archives. The new player 
was built with GTK and fits seamlessly into 
GNOME and other GTK based environments, 
The free Helix player will happily play Open 
Source formats such as Ogg Vorbis and Theora 
formats, but if you want to use Realaudio or 
Realvideo, you will need to use RealPlayer 10 for 
Linux. In addition to the Real formats, the 
RealPlayer 10 for Linux product has been 
extended to support MP3, Flash and other non- 
Open Source products. 


ad 


Source media players available, it seems the 
only true value is in being able to play back the 
Realaudio and Realvideo formats that are 
lacking from most Free Software media players. 
The offset to this cynicism is that the developer 
community will have a hand in which features 
go into the commercial RealPlayer 10 for Linux. 
Depending on your ethical stance towards 
commercial companies making use of freely 
submitted work, this can be a good or a bad 
thing. Dendi is fully supportive of the model: 
“RealPlayer is focused on creating a stable, solid 
and robust media player for end users. 


Real's focus is on delivering compelling 


media services to consumers and other 
end users, and the Open Source mode! 
enables Real to focus its resources on 
creating superb end user media 


experiences” - Dendi 


The approach that Real have taken is certainly 
similar to that of Netscape and Mozilla, but ther 
are restrictions. Despite the limitations, Dendi 
feels that releasing the code to the community 
has been the right way forward. “Both the Helix 
Player and the multi-format Real Players are free 
to the end user - like the Netscape/Mozilla 
model”, he suggests. Dendi is happy with the 
policy of visibly separating open and closed 
chunks of the Helix platform to avoid potential 
legal issues for both Open Source hackers and 
the Real payroll. 

“A central concept of the Helix Community 
model is that the Helix Player will function as a 
completely Open Source product under the 
terms of the GPL or the RPSL. The player's 
licensing options have been designed to provide 
the open source community with the flexibility 
to modify, experiment, and redistribute Helix 
Player technology without worrying about the 
commercial complexities surrounding the RCSL 
and Binary End User License Agreements 
(BEULA) licenses. This model allows for the Helix 
Player, and the underlying core media engine, 
to grow as a cutting edge and innovative media 
player platform that stays ahead of the digital 
media curve.” 

From a cynical standpoint, it is difficult to 
identify the true value in the development of a 
Helix based media player. With the sheer 
number of flexible and feature laden open 


RealPlayer adopts and integrates the mature 
features of the HelixPlayer, to ensure that the 
RealPlayer delivers a great media playback 
experience for Linux users, as well as adding 
service oriented features such as premium 
content availability.” 


DRAWING THE LINE 
When Real decided to mount the Open Source 
bandwagon, the company was eager to explore 
the potential of working with the Open Source 
community. Real has taken a long-term view of 
the market, and Dendi is confident that the 
Open Source development model will win. 
“Real's focus is on delivering compelling media 
services to end users, and the Open Source 
model enables Real to focus its resources on 
creating superb end user media experiences”, 
Dendi says. He is also confident that the 
potential with Open Source can result in 
specially developed versions of their software. 
“The Open Source model also offers Real the 
opportunity to develop premium/paid versions 
of its software. For example, there have been a 
number of requests from Player users requesting 
the creation of a paid ‘premium pack’ that 
would see the addition of DVD playback, 
MPEG4 playback etc to the Helix Player/ 
RealPlayer offering.” 

The true value of the Helix platform comes 
from the perspective of media encoding and 


Unravelling Helix 


distribution. Although the Realaudio and 
Realvideo codecs are closed source and and 
more restrictive, the ability to have a consistent 
media encoding, distribution and playback 


framework that is truly cross-platform will be a 
godsend for those who want to create cross- 
platform media content. This in turn will open 
up Linux and other free platforms to media that 
was typically off limits when a more commercial 
approach was applied to these tools. 

The challenge that Real will face is in keeping 
their Realaudio and Realvideo codecs current. If 
the Theora codec continues to develop well and 
g codec to be used with the 
Helix DNA Producer/Server/Player, this could 
relegate the commercial codecs to obscurity. As 
with other similar initiatives though, it is likely 
that the Real brand will add value and 
commercial confidence in the technologies 
created under the Helix community. This brand 
confidence will no doubt convert to prosperous 
revenue when combined with the lower 


provide a compel 


engineering costs due to the contributions from 
the community. Although this makes 
commercial sense, Real will need to be careful 
to not push the community too hard, or give 
the impression of exploiting the good will of 
software developers as wage-less slaves. If the 
line is drawn correctly, the symbiotic 
relationship between Real and the open source 
community could mean great things for the 
future of media production all platforms. 


Helix as a 
usable 
platform? 


guru can: 


g the Helix DNA 


gement 
x platform. 
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@ Open Personalities 


Frank Pohimann talks to Gary V. Vaughan, author, scientist, programmer and martial arts 


practitioner, about life, Linux, and Free Software 


Hack Kwan Do: 


ary V. Vaughan Sensei 


he Free Software Foundation has 

definitely done well with recruiting Free 

Software advocates in the US and on 
the Continent. In its country of origin, industrial 
laboratories and universities happily spread the 
gospel of Free Software communities based on 
free licenses, a philosophy emphasising 
communal concerns and the education of new 
programmers. tn Europe, universities provided a 
natural environment for new Free Software 
projects to grow - language problems rarely 
inhibited collaboration. Curiously, in the UK, 
with a culture somewhat distant from traditional 
engineering concerns, free software and the 
design of new pragramming languages seemed 
rather less heroic enterprises. But there are 
positive aspects as well; programming as a 
mathematical or artistic activity is more likely to 
be held in high esteem. 

Gary V. Vaughan, British author, scientist, 
programmer and martial arts practitioner spoke 
to LinuxUser & Developer both in person and 
via email. He is definitely one of the leading FSF 
programmers; he maintains m4 and libtool, and 
he has contributed to other projects as well. His 
opinions might not be what you would expect. 


Q: Where were you born, and what 
languages do you speak? 

| was born in Bradford, West Yorkshire, although 
| have lived there for only about four years since 
then. As a child my family relocated every two 
or three years, and as an adult I’ve continued 
the trend. I’ve lived in various parts of 
Hampshire, Devon, Warwickshire, West 
Midlands and Worcestershire. 
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| spent my very early years outside 
Johannesburg, South Africa where my parents 
mistakenly enrolled me in an Afrikaaner pre- 
school. Unfortunately for them, | became fluent 
in Afrikaans before my English had developed 
much, so we had a little trouble communicating 
for a while there. We repatriated when | was six 
years old, and | can’t remember a ward of 
Afrikaans these days. | did find German very 
easy to pick up in school, and there is a certain 
familiarity to the signs in Amsterdam... but that 
is another story entirely. 


Q: Where did you go to school, and were 
you introduced to computers before you 
went to University? 

After my stint in South Africa, | changed schools 
in England as often as my family moved home. 
Half way through my ‘O’ levels, we moved to 
the English Riviera, and | was delighted to find 
that the nearest school covering the same 


Actually, my Dad is responsible for my 
interest in computing: | had wanted an Atari 
games console for Christmas in 1981, but he 
told me that | shouldn’t be wasting my time 
playing games and bought me a Sinclair ZX81, 
the first home computer for under £100 - 


actually still a lot of money in those days. It only 
had 1KB of RAM, and some of that wasn’t 
usable for user-space code. 

To get as much out of it as | could, | spent a 
lot of time learning Z80 machine language 
while my Dad saved up for a 16KB RAM pack. 
For Christmas 1983 | got a Sinclair Spectrum, 
and soon after wrote an assembler for it, in 
BASIC, because my thermal printer had run out 
of paper, and hand assembling to hex code 
from mnemonics on a TV screen is a pain. The 
amazing thing about these early home 
computers is that they are still bought and sold, 
spares are quite easy to find, and there are even 
Open Source emulators for them on Linux, 


| SPENT A LOT OF TIME LEARNING Z80 
MACHINE LANGUAGE WHILE MY DAD SAVED 
UP FOR A 16KB RAM PACK 


examination syllabi as my previous school was 
Torquay Girls’ Grammar School. My time there 
was definitely worth the awkward questions I’ve 
been asked at job interviews regarding the 
unusual school crest at the top of my ‘O’ and ‘A’ 
level certificates. As a matter of fact, | wasn't 
entirely happy with my grades, and did the 
upper sixth form again... to improve my scores 
in the resits. Obviously. 


Q: How and under what circumstances did 
you encounter Unix and Linux for the first 
time? 

Starting in 1989, | studied for a BEng in 
Computer Systems Engineering at the University 
of Warwick. In my first year | had login access to 
a pair of Sun 3’s running some variant of SunOS 
4.1. | logged in using the many green-screen 
terminals around campus. In my second and 


third years | was allowed access to the Sun 4 
workstations running OpenView on X11R3; 
having seen nothing more graphically 
sophisticated than a Commodore 64 at that 
time, | remember staring open-mouthed at the 
photographic desktop wallpaper some people 
were using. Actually it was only 8-bit colour, 
and you had to install a private colour-map for 
windows that didn’t want to use one of the 256 
colours swallowed by the wallpaper - that 
made everything else look horrible, so the really 
smart guys either kept the default chequer- 
board pattern, or just had a flat single colour 
desktop. 

If | learnt anything from my three years at 
Warwick, it was that | am definitely a software 
guy. | had spent a lot of my spare time in the 
‘Sunny Lounge’ with the workstations, teaching 
myself C; and catching up on my sleep in 
lectures on Maths, Electronics and Computer 
Networking. In 1992, | started a BSc in 
Computer Science at Coventry University. 
Coventry was much more exciting. Many of the 
lecturers were from industry, and taught 
Practical software engineering skills. The 
computer room here was full of Intel PCs, but 


an early Slackware distro built around a 0.99 era 
kernel on a purpose built Intel machine of my 
very own! 


Q: When did you start working with the FSF, 
and what was your first project? 

| had been contributing patches to lots of Free 
Software for quite a few years before | took on 
maintenance of a GNU project. My employer 
in 1997 required everyone’s desktop machine 
to run Windows NT in order to access the 
corporate email server. Although unfortunate 


Open Personalities 


cygwin. Gord wanted to hand over 
maintainership and move onto something new 
by then, and since | had already submitted the 
necessary paperwork to the FSF, | agreed to co- 
maintain it along with Alexandre Oliva and 
Thomas Tanner. At first just the cygwin port, 
but over time | gradually took on more until 
Alexandre and Thomas moved on as well. 


Q: Why and how did you start working with 
m4 and libtool? 
| was looking for applications that could make 


I WAS INSTALLING AN EARLY SLACKWARE 
DISTRO BUILT AROUND A 0.99 ERA KERNEL 


for me, | was at least able to make things 
bearable by running cygwin32. Back then, 
apart from the compiler toolchain, quite a lot 
of the GNU software | wanted to use didn’t 
compile under cygwin, so | generated a lot of 
patches! The cygwin community was very 
lively and receptive to new ideas and code, so 
that was probably the first project | spent any 
serious effort on. | really missed running the 


IT BECAME APPARENT THAT GNU LIBTOOL 
WAS AT THE ROOT OF MOST OF MY 
COMPILATION PROBLEMS 


they ran Sequent Dynix x86, the first time | had 
seen a UNIX running on consumer computers. | 
was working in Games Workshop to pay my 
way through a second degree, and resolved, 
right there and then, to save for a PC instead of 
buying more small lead soldiers. 

As for Linux, in October 1994, | was lucky 
enough to land my first IT job with programmer 
and hacker extraordinaire, Marc Arnold. He was 
running Slackware GNU/Linux on his PC, and 
told me that | could have a copy of the 
installation discs. Soon after that, | was installing 


Enlightenment window manager when | was at 
work, so | spent a fair amount of time working 
on the supporting libraries to try and get it to 
compile under cygwin. 

Before too long, it became apparent that 
GNU libtool was at the root of most of my 
compilation problems. So, | subjected the 
author, Gord Matzigkeit, to a barrage of 
tweaks and patches over the latter part of 1998 
and early 1999, until libtool started to cope 
with DLLs and import libraries and other 
Windows artifacts reasonably well under 


use of libtool’s (then) new module loader, 
libltdl, which presents a single API to the 
programmer, but loads dynamic shared objects 
at runtime using whatever mechanism the host 
provides. First, | helped Bob Friesenhahn port 
the ImageMagick loader to libltdl, and ported 
the imlib2 loader to libltdl soon after. | also tried 
to rewrite gmodule, the glib plug-in loader, in 
terms of libltdl, but unfortunately, those patches 
were never merged. | then found that GNU M4 
had seen continued, if sporadic, development 
since the release of 1.4 in 1994, including an 
embryonic module loader for runtime M4 built- 
in primitives. | rewrote the module loader over 
libltdl, and sent patches to Rene Seindal, the 
original author of GNU M4. 

At the end of 2000, GNU Savannah was just 
picking up momentum and | asked Rene if he 
would open up his development process, and 
let me put GNU M4 on Savannah. He was 
delighted, and sent me all of the tarballs he had 
made from GNU M4 at various stages in its 
development to seed the CVS tree with. Rene’s 
code was extremely clean, and well commented 


which made working on it a joy. | spent a lot of 
time refactoring it so that now even the 
standard built-in commands are loaded by 
libltdl at startup. 
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Nowadays, at work | use Python. Python has 
great libraries, and makes it easy to write a little 
code with a lot of functionality. In short, it’s 
neat! At home | like to write in C. The language 
is tiny, but expressive. {t is close to the machine, 
and | know exactly what it is doing. There are 
libraries for just about anything, and as long as | 
take a reasonable amount of care, my code will 
run pretty much anywhere! | also like M4, 
which is lucky for me, since I get to write a lot 
of it. The problem with a lot of the M4 I write is 
that it is preprocessor for portable shell, which is 
a necessary evil for the autotools. Although | 
have had fun moving some of the functionality 
of libtool up into the M4 layer from the Bourne 
Shell layer. 

Why don’t | like Perl? Because I have seen 
Python! Perl has too many idioms which makes 
it a write only language for all but the most 
dedicated Perl users. Every time | see Perl code 
by a different programmer, | have to figure out 
what it is doing from first principles again. 


dl ¢ 
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QinetiQ, formerly a part of the Defence 
Evaluation and Research Agency, employed me 
on the strength of my involvement in Free 
Software. It is a great place to work for forward 
thinking people of any kind, and as a company 
encourages innovation and free thought from its 
ion to a view of the Malvern 


employees. In ad 
Hills from my desk, | get to work with some 
fantastically talented people on cutting edge 
technology. 

Great hackers like to use great tools, and are 
more productive in an environment that offers 
them the chance to work with best of breed 
software, proprietary or Free. Employing as many 
people as it does, QinetiQ gives individuals a lot 
of choice in which groups to work for, and 
people like myself don’t have any problems 
finding work with Free Software on Linux. Where 
practical, we also contribute code and research 
back into the community, and try to raise 
awareness of Free Software in the industry. 


My pressure valve for the last twenty add years 
has been martial arts. I’ve practised in dozens of 
styles at as many clubs over the years as | have 
moved around. | regularly practice in just three 
styles at the moment, and compete at the 
national level in one of them, Tae Kwon-Do. Last 
year | came second in the Mens’ Heavy-weight 
Black Belt division, mostly thanks to the finalists 
both being disqualified for excessive contact. After 
a 17 year hiatus, | have resumed training in 
Shotokan Karate, the style on which Tae Kwon-Do 
was originally based. And of course, no martial 
artist can be complete without studying Bruce 
Lee’s Jeet Kune Do... 


WHY DON'T I LIKE 
HAVE SEEN PYTHON! 


Simplicity and expression are key. I'd like to say 
that Scheme is that language, but I‘ve never used 
it for real, and | think GNU Guile, the official 
extension language of the FSF, should have been 
implemented better. 

To be fair though, | have colleagues who swear 
by it if the problem fits. | think I'm going to plump 
for something completely out of left field, and 
hark back to my early coding days at University: 
MUF, aside from having an amusing name, was an 
implementation of Forth for Multi-User Dungeons 
- Muck Forth. Originally it was implemented in a 
clever single process time slicing algorithm bolted 
into TinyMUD. Unfortunately, it has suffered 
feature creep and is but a shadow of its former 


self in its modern incarnation in Fuzzball Muck. 
At the moment, I’m keeping a close eye on the 
Furth project from Tom Lord, of GNU Guile 

and GNU Arch fame. It is planned to be an 
embedded extension language that will take the 
best bits of both Scheme and Forth. | can hardly 


wait to see it develop. 


Like weird science, a black art, or witchcraft, you 
mean? Seriously, there are elements of all three, 
but you are exposed to different aspects 
depending what you're working on. I’m not just 
sitting on the fence here: there are algorithmic 
aspects and programming methodologies in the 
science corner; interpretation of and expression 
in a programming language in the art comer; 
and the methodical application of proven idioms 
in the craft corner. Take your pick! 


Open For Business @ 


Open For Business is all about how you can replace proprietary technologies with superior 


Open Source alternatives, so slashing your costs, vastly improving speed and reliability and, 


perhaps even more important, allowing you to wrest back control of your IT infrastructure 
from the proprietary IT suppliers. 


Reclaim your inbox 


LDAP, Thunderbird & Squid 


his month’s ‘Open For Business’ Is the 

final in our LDAP mini-series. The series is 

about using directory services to make 
administration of your network easier, and 
potentially, how to replace every bit of 
proprietary software you may have in the 
network with better Open Source software, plus 
how to tie it all together. 

So far, we've covered setting up a Directory 
Service based on OpenLDAP, and everything 
you need to do to create a single user account 
base and single sign-on across all of your 
Operating Systems, including Windows. We've 
also covered tying in a first service to the system 
by LDAPifying your Open Source email system. 
Our final episode is going to drap some strong 
hints on how you extend this to everything! 
Then, as an added bonus, we're going to show 
you how you can use your Directory Server as a 
centralised address book for your email 
No time to wait. Let’s get started... 

If you've been following the series so far, your 
OpenLDAP server will already have a lot of 
information about each user. Take a good look 
at the kind of information you can still fill in (use 
a desktop client for this, gq if you've upgraded 
to an Open Source desktop, or something like 
Jxplorer if you're still running old fashioned 
Windows - both are free). You'll see that there’s 
all sorts of stuff from an HR point of view. There 
are home and office addresses. There are 
telephone numbers {including mobiles), there 
are car registration numbers, and you can even 
upload a photo if that’s your choice. Go ahead, 
fill some of them in using your desktop LDAP 
browser - it's easy. 


system. 


THUNDERBIRD 

Now we've got some address book type info 
filled in, let's see where we can display it. All the 
nts handle LDAP 
integration superbly. Evolution, kmail, mozilla - 
they all work very nicely. However, I'm going to 
illustrate this with Thunderbird. Three reasons: 


Open Source email 


® It's my favourite email client with a GUI (’'m 
generally a mutt man). 

®t runs really well on a Windows desktop for 
anyone out there still using one. 

M@ it's in the press (see The Daily Telegraph) 


HOW TO DO IT 

All you have to do is fire up Thunderbird and 
open the address book. Click on ‘File’, ‘New’, 
‘LDAP Directory’ and fill in the box. Call your 
new address book anything you want in 
‘Name’... ‘hostname’, bizarrely, is the hostname 
of your LDAP directory, ‘base DN’ you will know 
all about from Episode 1 of our series. Now, 
guess what, you're done! 

Watch your address book fill itself with ail the 
people sitting in OpenLDAP. Even better, if you 
start typing an email address in the Compose 
window, Thunderbird will make suggestions as 
you go along from your LDAP directory - how 
cool is that. Yeah, way cool. 

Believe it or not, you can even set up 
Microsoft LookOut (whoops, | meant OutLook, 
sorry) to access your centralised address book. 
Of course, none of you still use this monstrosity, 
but I'll tell you how to do it anyway (but for the 
latest build only - there are so many gratuitously 
incompatible versions of Outlook the mileage 


may vary on this one). 

Co to the Tools menu and open up 
‘Accounts’. Click and hold the ‘Add’ button and 
then select ‘Directory Service’. You'll see a few 
generic directories (that nobody uses), but 
ignore these. You'll now be able to add your 
own LDAP directory in a similar way to the way 
you did it with Thunderbird. 

It won’t have as much easy-to-use 
functionality as the Open Source clients - it’s | 
nowhere near as advanced (besides, you 
haven't paid tens of thousands of pounds to use 
Exchange yet, you naughty person - you won’t 
be getting a Christmas card from MS UK or Bill 
this year). 


LDAPIFYING JUST ABOUT 
EVERYTHING 

hate to tell you this, but LDAPifying most other 
Open Source products is even easier. 

Here’s an example... If you're using the 
absolutely excellent ProFTP server (if not, 
seriously, why not?) on your network, then tell it 
you want to authenticate against LDAP in its 
configuration file, and then enter the hostname 
of your LDAP server. Then you have to... oh no, 
sorry, that's it. All done! 

Rocket science, right? Mega IT consultant, 
right? 

OK? How about Squid? 

Well this one is really tricky. You have to tell 
Squid you want it to use LDAP, and then you 
need to tell it the address of your LDAP server 
and... er, that’s about it. 

OK. How about your Internet site or your 
Intranet, Of course you're running these on 
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HAD EN@®@GH YET 


It doesn't have to be like this. 


There is an alternative, and it's a 
far, far better way. 


For you, For the Business. 


It's the Open Source way. 


We're Sirius, the UK's leading independent 
deployment specialists. 


So have YOU had enough yet? 
Isn't it time YOU made the change? 


Then call Sirius today. We will show you 
how things could be, and can be. 

And the precise benefits you “ 
gain, for your Business, po? . 
and for your users. oe 


rag 
1 eur?” 


SiriS 


http://www. siriusit.co. uk 


Apache and maybe even doing some dynamic work with perl, php or 
python. Have you noticed yet that Apache has an LDAP module that 
enables it to authenticate against LDAP once you've told it to...? 


THIS IS GETTING BORING 

Guess what. Rather than bore you any more, all of your favourite 
Open Source website scripting languages also have modules that 
enable them to talk direct to your LDAP server. Only problem is, you 
have to tell them to... Tough world. Right? 

As Morpheus said - the truth is out there. 

The truth is, that in the Open Source world, you can LDAPify 
pretty much everything. And that’s exactly what | recommend you 
go out and do. Remember - if it moves, LDAPify it! (you heard it from 
me first). 

Well, we’re dane with our examination of LDAP. | hope you've 
enjoyed reading it as much as I've enjoyed writing it. More 
importantly, | hope you've decided you’re going to get started with 
LDAP on your own network - you'll be very pleased you did. And so 
will your business. 

Next month we're going to change the focus entirely and look at 
a small, but increasingly important area - email filtering. Sure, this is 
just one aspect of an email system, but it’s getting increasing press 
these days (or maybe you don’t get offers for some rather odd 
services from people you don’t know in your inbox). We're going to 
examine how you can clean your incoming email from viruses and 
spam entirely using Open Source technologies. And all because it's 
simply better software. 


Mark Taylor is a Lead Consultant with Sirius, and can be contacted at 
mark.taylor@siriusit.co.uk 


Smalltalk objectively 


Alan Kay, the inventor of the Smalitalk programming language, once said that “the best way to 
predict the future is to invent it." Frank T. Pohimann delves into the history of Smalltalk and 
the origins of object-oriented programming 


Imagineering 


Smalltalk 


here was a time when the ability to 

write applications in Smalltalk was 

considered an accolade. Pre-2000, 
Smalltalk programmers were not only hired 
for their ability to write programs in a very 
popular programming language, but they 
were also reputed to possess a better-honed 
ability to design large applications using pure 
OO design principles. 

Talking about Smalltalk usually involves 
talking about the beginnings of commercial 
programming; indeed, one could argue that 
programming as a profession started with the 
appearance of a programming paradigm that 
did not invoive a conscious abstraction from 
underlying hardware, but used metaphors 
tested on 12-14 year-old teenagers. 
cientists who developed 
rt as the first laptops 


mathematical foundations in category theory, 
but appealed to an audience that was far 
larger than the usual ex-scientists and 
mathematics dropouts. The research groups 
at Xerox PARC developing all those 
technologies were extremely unusual 


a small team in an industrial laboratory, Unlike 
C, Smalltalk was developed by the same 
Xerox PARC team that pioneered windowing 
systems, the mouse and an integrated 
approach to personal computing. € and Unix 
were driven by the need for an efficient muiti- 


Object-oriented programming had clear 
mathematical foundations in category 
theory, but al el to an audience thaf'was 


far larger 


characters and came from backgrounds that 
reflected much of the culture of the 60s: 
creativity had not been replaced by 
productivity yet, and programming languages 
were regarded as tools that helped people 
think. The opportunities realized by object- 
oriented pragramming didn’t become fully 
apparent until the arrival of Smalltalk in the 
early 70s. Like C, Smalltalk was developed by 


an the usual ex-scientists and 


mathematics dropouts 


tasking operating system. Smalltalk was driven 
by the incipient personal computing 
revolution. 

Today we tend to take object-oriented 
constructs like classes, objects, inheritance, 
polymorphism and data encapsulation for 
granted. Simula, a language created in 
Norway in the early 1960s, and Smalltalk, 
pioneered these concepts in an embryonic 
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@ Smalltalk objectively 


To speak of classes and objects is to speak of 
the very first concepts one has to understand 
hefore one ever = to wield a keyboard to 


produce Smalltalk code 


form, but Smalitalk became the canonical 
object-oriented language. It was not always 
so. Java and its class-based inheritance model 
co-exist with a C-based syntax that dictates 
particular contro! structures to the user. The 
1970s and 80s users did not have this 
heritage to grapple with. 


MEANING AND PURPOSE 

OF SMALLTALK 

Using Smalltalk does not just entail knowledge 
of syntax, semantics and object-oriented 
structures, Indeed, the division between an OO 
part of the language and the rest of Smalltalk 
would not make any sense. The class libraries, 
the IDE and the language form one inextricable 
whole. The underlying virtual machine hides the 
OS from the Smalltalk program and lets any 
Smalltalk programmer focus on design, 
modeling and coding. To speak of classes and 
objects is to speak of the very first concepts one 
has to understand before one ever gets to wield 
a keyboard to produce Smalltalk code. 

The current version of Smalltaik is known as 
Smalitalk 80. it exists on a number of operating 
systems, including Linux, but most importantly, 
it is the purest expression of object-oriented 
design and its mathematical antecedents in 
category theory available on Linux today, The 
Smalitalk environment represents a link to a past 
when programming and creativity were seen as 
intrinsically linked. 


“An operating system 
is a collection o 
things that don’t fit 
into a language. There 
shouldn't be one” 

= Dan Ingalls 


When we talk about object-oriented 
programming, however, its origins lie in the 
history of big systems. Simula was created to 
write software for oil-drilling platforms. It was 
meant to simulate large-scale problems using an 
approach that was more practical than Algol or 
its dialects. Today, much of the history of Simula 
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and early Smalltalk have become part of the 
folklore surrounding software history, but it is 
still difficult to find an adequate account of 
programming history that makes the success of 
object-oriented programming understandable. 

We are relatively lucky with regard to the 
historical position of Smalltalk, since one of its 
main creators, Alan Kay, happens to be 
extremely open, aware of the wider 
implications of his own work, and well- 
known among researchers in programming 
language design. 


A NEW WAY TO PROGRAM 

Kay had encountered Simula as a student, and 
soon realised that there were ideas he could 
use. He had been impressed by Engelbart's 
demonstration of a working windowing 
system in 1967. Even earlier, he had 
encountered Sketchpad, the first graphics- 
based interactive computing system ever 
built. There was no overarching cluster of 
ideas hotding the various strands of computer 
architecture and programming language 
design together at the time, but it very slowly 
dawned on Alan that object orientation and 
the creation of graphical user interfaces were 
likely to hold the key to a future promising 
miniaturized, rnass-manufactured computers. 
Intel was unknown, and integrated circuits 
were a fairly new technology. Anyone 
interested in what was to become Personal 
computing had te develop hardware and 
software components independently. 

The Xerox PARC group, which had been 
founded in 1970, had begun to hire a number 
of young researchers who had fairly clear 
ideas where the future of computing was 
going. Although much of the research 
money at the time was still heading towards 
large time-sharing systems, Alan Kay et al 
believed accessibility and usability were going 
to be key. 


CHILDREN AND ADULTS 

First and foremost, Smalltalk was part and 
parcel of the laptop computing idea. Laptops 
or “Kiddikomps” as they were called at the 
time were not only to be equipped with 
graphical user interfaces and the mouse 
(another well-known Xerox PARC first), but 


also with a programming language that 
should be usable by children, without 
sacrificing the power and generality of 
industrial strength programming larigquages. 
To paraphrase Alan Kay, it was important that 
programmers should be able to avoid thinking 
like Turing machines. He was adamant that 
Smalltalk, although clearly an interpreted 
language, should be strongly typed. This 
might sound like a contradiction in terms, but 
we should not forget that dynamic tate 
binding which is usually associated with 
interpreted languages does not automatically 
entail weak typing: the treatment of types is a 
separate matter. 


SMALLTALK RATIONALE 
The basic ideas of Smalltalk from its 72 
version onwards were fairly simple: 


Everything is an object. This rule is to be 
taken literally. Every constant, class, 
message, variable and method is in some 
way to be taken an object. Classes are 
objects that represent instances of 
themselves. 


BM Objects communicate by sending and 
receiving messages. This is a point which 
tends to create problems. Imagine an 
operator in C, like the plus sign or 
modulo. The operator would be 
considered a message which in turn 
would be sent to a number or string. This, 
of course, presupposes that unless we are 
talking about a unary operator, the 
message already holds an object before it 
is applied to another object. 


Objects have their own memory. This 
sounds somewhat trivial today, but the 
notion that each and every one of 
Smalltalk’s objects managed their own 
memory seemed revolutionary at the time. 


WM Every object must be an instance of a 
class (which, in turn is an object). This 
rule implies that all classes have to be 
instantiated. Abstract classes are not 
possible with this approach and only 
single inheritance is implemented. 


The class holds the shared behaviour of its 
instances, This rule eliminates abstract 
classes and forces implementations to be 
written for declared behaviours. 


To evaluate a program list, control is 
passed to the first object and the 


remainder is treated as its message. This is 
the only rule that makes a part of syntax 
explicit. The previous rules imply that it 
does not really matter what kind of 


tree they inhabit. Other programming 
languages permit the user (or programmer) to 
weaken data encapsulation strictures. C++ is 
probably most famous for its “friend” classes 
that permit previously fenced-off data to be 
accessed by outsiders. 


objects the messages are being sent to: 
polymorphism has been invented. 


The revolution in programming paradigms 
had begun. True, some of the basics had been 
developed earlier. The British scientist 


SIMULATION’S WHY 

It was important to realize that the Smalltalk 
group tried to prevent programmers from 
accessing or changing state information inside 
objects. Programmers were not supposed to 
rediscover the structure of a Turing machine: 


Strachey’s ideas on polymorphism predated 
Alan Kay’s, but what is curious about Smailtatk 
is that syntactical considerations went almost 
completely out of the window. The 
complexity of Algol-derived languages, with 


they were supposed to focus on the structure 
and function of the world they were supposed 


Smalltalk became a eomiage for the industry 
rather than a tool enabling universal creativity 


which C and C++ are afflicted to some extent, 
has established the expectation in the 
programmer’s mind that writing code almost 
always occurs while control structures and 
Operators are part of the language used. 
Functional programming languages, of 
course, do not usually contain such elements, 
but object-oriented languages do not need 
explicit control structures either. It is perfectly 
possibly to send a particular message a 
predetermined number of times to the object 
in question without ever so much as 
mentioning keywords like “if” or “while”. 


CONSEQUENCES 

Object-oriented programming using Smalltalk 
had another side effect: multi-media 
capabilities became a lot simpler to design 
and code. Even the earliest reports of 
Smalltalk mention music synthesizers, 
painting tools, and video. Coupled with 
incipient Ethernet experiments, the 
researchers at Xerox PARC produced a strong 
brew - perhaps a bit too strong for the Xerox 
information technology managers of the time. 
Some attempts were made to kill the projects, 
but Smalltalk and interim Dynabooks 
continued to be developed. 

The fundamental difference that Smalltalk 
made did not necessarily come from rather 
obvious characteristics like polymorphism, 
encapsulation, inheritance and so forth. Alan 
Kay noted that all these can be imitated quite 
successfully using different programming 
languages. 

What is decisive is the fact that all objects 
are fenced off against the outside world: they 
are all “first-class citizens” of the inheritance 


to model. In some ways, the original concepts 
of OOP in early simulation languages like 
Simula never entirely disappeared from sight. 
The objective was to find out how to program 
creatively, and to build new applications. As 
Stewart Brand sai 


in 1974: “One informative 
place to inquire is among the hackers, 
particularly at night when they’re pursuing 
their own interests”. He was referring to 
Xerox PARC and its Learning Research Group 
(LRG), the group Alan Kay was a member of. 
Smalitalk had an enormous influence on 
subsequent programming language design as 


Smalltalk objectively m 


well as the very notion of programming as a 
creative pursuit. Although it did not resemble 
any present and future programming 
language in its (very simple) syntax, its 
semantics had a permanent influence. The 
Smailtalk GO mode! set the trend for all other 
OO languages coming after it. Simula did 
some data encapsulation, but its version of 
object orientation was not as thoroughly 
thought out as the Smalltalk flavour. 


MORE THAN SMALL TALK 
But Smalltalk consisted of rather more than 
just a programming language and its libraries. 
The programming language was supposed to 
be the lowest level at which the user 
interacted with the computer. In the famous 
phrase of Dan Ingails: “An operating system is 
a collection of things that don’t fit into a 
language. There shouldn’t be one.” This 
saying has often been misunderstood as a 
statement that the operating system is a result 
of bad language design; of course, Ingalls was 
making an aesthetic statement - a 
programming language should make all 
facilities that are usually available in an 
operating system available to the 
programmer. Naturally, this is the dream 
followed by exokernel designs: almost all 
hardware facilities are open to the 
programmer. 

In the end, though, the later versions of 
Smalltalk-80 became constructs that could 
easily be used by experienced programmers, 


A mathematics and biology graduate, a distinction Alan s 


Von Neumann, he worked on almost all projects that spawned modern 


computing. While studying at the University of Utah, he helped build the 


first modern architecture that upported 3-D graphics. He was 


ARPA projects leading to what we now cali 


olved in 


e Internet. But his 


multidisplinary approach to the creation of o ject-oriented programming, 


several programming languages and a whole new concept of personal computing marked him 


out among as a visionary and an excellent engineer. 


Probably one of the first programmers ever to be called a “hacker”, he led the Xerox PARC 


research group for more than 10 years, before joining Atari in 1983 and Apple in 1984. Steve 
Jobs is said to have been ins; 
Xerox PARC, 


He joined 


to enable children’s creativity. He has often been callec! a child of the 1960s, 


h wild dreams 


and a gift for inspired leadership. Today, he combines a senior fellowsh p at Hewlett-Packard 
with the position of senior research scientist at the Univers 


His list of rewards would fill a page in this mad 


Turing award. He is s 


creation of Squeak, amu 


made by the Smalltalk research group at Xerox. 


a-authosing environment delivering many of t 


azine, and of course includes the ACM’s 
nvolved in many research projects and was instrumental in the 


promises 
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HACKERS OF 


for inspiration, 


re-awakened several times since the Renaissance, excavated, 


imagined, condemned, misunderstood, trampled underfoot, 
colonized and the classical language forced on generations of 
schoolboys. Astonishingly, it lasted from the days of Homer to the fall 
of Constantinople, outlasting the Western Latinised portion of the 
Roman Empire by almost a millennium, 

Culturally and politically, Greek culture was never monolithic. 
Indeed, one of the major complaints of Greek historians from 
Herodotus in the late 6th century BC to Procopius almost 1100 years 
later was motivated by the fierce independence exercised by 
numerous Greek city states located in areas as far apart as today’s 


Turkey to Southern Italy, 


SEA POWER 


Geography was a major factor in the development of Greek 
technology, science and philosophy. Taking its cue from Minoan Crete 
during the latter half of the 2nd millennium BC, many Aegean islands 
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developed into thalassocracies, projecting their power almost entirely 
via their navies to keep sea lanes free for trade and migration, 

Athens had a powerful navy, but much of its influence was based 
on its considerable !and army. Aegean island states like Chios and 
Rhodes, however, had to rely on naval power to protect themselves 
agalnst thelr more powerful neighbours like Sparta, Athens and later 
the Seleucid kings and the Romans. Contrary to standard classical 
historiography, some thalassocracies managed to survive well into 
Roman times; long after post-Alexandrian Macedonia, Athens and 
Corinth had become pliable members of the Roman empire, Rhodes 


was enjoying independence well into Julius Caeasar’s reign. 


BRAIN POWER 


ln many ways, naval power was the great leveler of ancient 


Mediterranean poli The battle of Salamis ending with the defeat 


of the Persian fleet had conclusively proved that power was not only a 
matter of marshalling resources and logistics but also of superior 


naval technology and training. Historical records and original so 


SCHOLARS OF CLASSICAL 
GREEK NOTICED THE 
LESSER EMPHASIS OF 
GREEK HISTORICAL 


True Stories @ 


SOURCES ON, SAY, CIVIL 
ENGINEERING AS 

COMPARED TO 

MATHEMATICS OR —< 
COSMOLOGY — | 


do not focus much on technology or artisanship, though. Standard 
sources on astronomy and mathematics - both fundamental to navigation 
and shipbuilding - show that astronomy, arithmetic and geometry were all 
regarded as worthy of a well-educated gentleman’s attention, but 
navigation and engineering were conspicuously absent from the text 
books studied in somewhat more advanced schools among the Greeks. 

Luckily, this omission is a result of chance. Scholars of classical Greek 
noticed the lesser emphasis of Greek historical sources on, say, Civil 
engineering as compared to mathematics or even cosmology. Despite this 
omission, classical historians like Diodorus, the geographer Strabo and the 
Roman historian Polybius noted Rhodes’ eminence in nautical and 
mechanical engineering. The astronomer and discoverer of trigonometry 
Hipparchos lived on Rhodes; references to complex devices built on 
Rhodes abound in classical literature from Plutarch to Cicero, Oral 
literature is known to have played a fairly large role in Greek learning, but 
this is not the major issue here: the confirmation that Greek engineers 
matched architects and mathematicians in ingenuity and daring came 
only during the early 20th century. The new science of archaeology came 
to the rescue. 


DISCOVERING A COMPUTER 

Greek nautical archaeology became a viable enterprise after several chance 
finds during the first half of the 20th century. It is one of those finds that 
revolutionized our understanding of the beginning of mechanical 
computation. 

In 1900, the sponge diver Elias Stadiatos looked for his daily catch 
near the small Aegean island Antikythera right between Crete and 
mainland Peleponnes; what he found resembled - in his own words - 
“dead naked women” underwater. He had found the remains and cargo 
of a Greek trireme. The first ancient Greek nautical archaeological site 
had been discovered. All 6 divers in Stadiatos’ group continued loaking 
for the remains of the ship’s cargo for almost a year, although 2 of them 
died from the effects of frequent depressurization. It took a further two 
years until the finds had been fully catalogued. It was only then that a 
Greek archaeologist noticed some rather unsightly lumps that looked like 
gear wheels. 


THE STATE OF A GREEK COMPUTER 

Early speculations about the function of the gearing and the wooden 
casing, that had disintegrated within days after it had been recovered 
from the sea, started almost immediately. It was claimed that what had 


been found was an early astrolabe, but since the earliest example of a 
functioning astrolabe had only been attested for 625 AD, and the ship had 
sunk around somewhere in between 88 and 80 BC, the claim seemed 
premature. Early controversies centering around the rather inchoate lumps 
of metal went nowhere, since modern diagnostic techniques like 3D X-ray 
imaging were not available as yet. 

The significance of the wreck for Greek nautical archaeology cannot be 
overestimated, but the mechanism hidden in what looked like clumped, 
corroded bronze lumps baffled most researchers for decades. We have to 
realize that at the beginning of the 20th century, analogue computers 
were not very common. Babbage's differential engine had not been a 
success and the mathematical work preparing Turing machines had not 
even begun, Hollerith’s perforated cards were the dernier cri in calculating 
machines. Of course, mechanical calculators for scientific purposes were 
well known, but astrolabes of similar complexity had only been confirmed 
for the 14th century at the earliest, 

There are hints that similarly sophisticated Arabic astrolabes existed 
before the Mongol invasions, in the 13th century. But apart from some 
fanciful descriptions of astrolabes and other mechanical contraptions that 
did not contain any implementation details, Cicero's tant ing hints at 
the Stoic scholar Poseidonios’ construction of what amounted to an 
astronomical calculator had to remain improbable claims. 


PRICE DISCOVERIES 

In 1951, the British-born, Yale-based historian of science, Derek de Solla 
Price, arrived in Athens to study the remains of the device that had so far 
defied analysis. It took Price the better part of 8 years to come up with 
some tentative conclusions. In one of the most famous articles ever 
published by Scientific American in 1959, he presented an unbeli ving 
audience with his first conclusions, 

The machine or “computer”, as Price called it, used, at least in Price's 
interpretations, a complex system of 32 bronze and one differential gear 
to compute and predict positions of the Sun and, somewhat surprisingly, 
the moon. It seems to have been possible to read off lunar and solar 
eclipses from the back face of the device casing. There are many 
revolutionary aspects to this device, not the least of which is the time 
during which it was built. 

Price's artifact hermeneutics have been doubted since, and the 
existence of a differential gear has been disputed in particular by Michael 
Wright, curator at the Science Museum in London. 

The device changed our understanding of ancient Greek engineering in 
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a very important regard: the device was extremely precise. A modern 
reconstruction of the Antikythera device showed that any calculations 
performed would give only give an error of about 1 minute in 1 month. 
One year after the device had been set or reset by either the craftsmen 
building the device or a captain using it, the Antikythera device would 
have produced an error of up to 12 minutes in, say, predicting a lunar 
eclipse. This degree of accuracy was not only entirely unexpected for a 
device crafted during the 1st century BC, it was considered impossible for 
any engineer to build a device of such precision before the 15th century. 
Neither the tools, nor the engineering skills were known to have existed at 
the time in any part of the world. 


WHERE ARE THE HACKERS? 

Greek sources do not mention, or even hint at the underlying mechanism 
of what constitutes an extremely sophisticated navigational aid. But we 
should also add that anything what we would consider technical manuals 
of any kind have not been preserved in either literary or scientific 
traditions in the Latin West, Byzantium or Arabic literature across the 
Middle East or North Africa. 


THE MECHANISM 
HIDDEN IN WHAT 
LOOKED LIKE CLUMPED, 
CORRODED BRONZE 
LUMPS BAFFLED MOST 
RESEARCHERS FOR 
DECADES 


All benefited from Hellenistic technology, but it is only in Islamic sources 
of the Middle Ages that we find a description, which, according to de 
Solla Price, make it quite clear that the same basic techniques and 
concepts known to the Greeks were used in the making of astronomical 


instruments in the Islamic commonwealth until the Mongol invasions 
during the 13th and 14th century. The account by al-Biruni was probably 
written during the early 11th century, but it shows us how tenuous the 
links between the astronomical “computer” of Rhodes and medieval 
astronomical instruments really are: there are no documents or 
archaeological finds unequivecally linking both; it is the commonalities like 
the overall layout of the gear assembly that suggest a common origin. 
Now the problem we are facing here is two-fold: the Greeks neither had 
time-measuring instruments that were precise enough to permit 
comparisons of calendaric measurements with the results produced by the 
Antikythera device, nor did they have large amounts of data to built a 
working model of the movements of the 5 planets known to the Greeks. 
The need for precision was, however, paramount, since the Greeks, like 
most agricultural societies, needed astronomical computations to predict 
the seasons. Known Babylonian algorithms took care of that problem, and 
were known on Rhodes. That would explain some, but not all of the 
computational sophistication of the mechanism. But there are important 
pieces missing in the picture: how did the Greeks manage to build a 
machine using 32 bronze gears that might have included 1 differential 
gear, and had an accuracy greater than an average 18th century clock? 


066 LinuxUser & Developer 


THE MEANING OF A GREEK COMPUTER 

Greek and other merchant shipping needed to navigate in the 
Mediterranean, the Eastern Shores of the Atlantic, the Black Sea, the Red 
Sea and ultimately, the Indian Ocean, Obviously, the gear makers of 


Rhodes knew something about the needs for navigational instruments, 
and we knew that they built to order. The instrument found near 
Antikythera is nat likely to have been unique. 

Fairly precise measurements using the Sun and the Moon's position 
relative to each other seem fairly straightforward. Nevertheless, they are 
complicated by the fact that there is no obvious relationship between 
the angular velocities of both celestial bodies. But there is a relationship 
that is sufficiently accurate to be used in the construction of an 


astronomical calculator. 


ALGORITHMS 
A Greek thinker of the 5th century BC, Meton, found a relatianship 
between the lunar months and the solar year that related 19 solar years to 
(almost) 235 lunar months. The Metonic cycle was the basis for the Greek 
- and by extension Roman - calendar before the Julian calendar was 
introduced in 46 BC. Known as the Metonic cycle, this is what was 
incorporated in the gear mechanisms used by the Antikythera machine. 
The average lunar month takes about 29.53059 days. The average solar 


THE MACHINE USEDA 
COMPLEX SYSTEM OF 32 
BRONZE AND ONE 
DIFFERENTIAL GEAR TO 
COMPUTE AND PREDICT 
POSITIONS OF THE SUN 
AND THE MOON 


THE ASTRONOMICAL COMPUTER FOUND NEAR 
ANTIKYTHERA HAS NO CLOSE ANALOGUE AT ANY 
ARCHAEOLOGICAL SITE IN GREECE OR ANYWHERE | 


ELSE INTHE WORLD 


year takes approximately 365.2425 days. Some trial and error will result in 
a 19-year cycle whereby 19 solar years last for 6939.6075 days. If this 
number is divided by 29.53059 days, the result is very close to 235 
months. There are extensions to these cycles known as the Calippic cycle, 
which corresponds to 4 times as many years (76) and a commensurate 
number of lunar months. It is named after another Greek, Calippos, a 
mathematician who lived around 325 BC. The interior mechanism used 
these simple algorithms to calculate time and show the position of the sun 
in the Zodiac, which was supposed to be read from the front dial. 


GREEK MACHINE 

The two back dials on the casing showed lunar rising and setting as well as 
apparent planetary positions including the retrograde motions of Mercury, 
Venus, Mars, Jupiter and Saturn. Now the gearing of this little machine is 
extremely complex; to explain its workings took Price decades of steady 
work culminating in a 70 page publication in 1974. What is not entirely 
clear is how this astronomical calculator was used, but since it was a 
navigational aid, the position of the moon against a fixed star, which 
could be read off the back dial, would permit fairly precise longitude 
determination at night. The navy protecting Rhodes was known for its 
astonishing capability to navigate at night. 

As we have said before, the accuracy of this machine was astonishing: 
the gears do not seem have to have permitted more than a 1-minute error 
per month, There is a more thorough explanation for how the accuracy 
was achieved, but suffice to say that the mechanical implementation of a 
finite difference method together with some high-precision artisanship 
permitted the low error rate. 

The astronomical computer found near Antikythera has no close 
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analogue at any archaeological site in Greece or anywhere else in the 
world. Although similar instruments seem to have existed during that time 
and throughout antiquity, we know that the technology was not very 
widespread. It is possible that the mechanism was kept secret and the 
manner of its production guarded on Rhodes itself. This attitude was fairly | 
common in the Mediterranean well throughout the Middle Ages and the 

Renaissance: Nautical and military technology was not open to the outside 


world; it conveyed a competitive advantage in trade and war that made | 
small powers virtually invincible in direct conflict. 

Indeed the technology is so complex that Michael Wright who works as a 
curator at the Science Museum in London announced after some 
independent investigations that certain interpretations of the internal gear 
wheels and their functions have to be doubted: the wheels are not complete 
and therefore the very existence of the differential gear has been doubted. 
Its existence had to be inferred from the function obvious from the dials and 
the remains of gear wheels imaged by linear tomography. He claims that 
there is possibly only an epicyclic arrangement on one back dial, showing 
the planets, sun and moon together. Such are the riddles and 
interpretations of the most astonishing computational device ever found. 

The tale of the 2100-year-old Greek computer has not been fully told 
yet. We know of other mechanical inventions and books by the 1st 
century AD engineer and mathematician Heron of Alexandria, although 
they don’t seem to have had any relationship to computational automata 
like the Antikythera device. He invented several cybernetic devices and 
what amounted to a programmable miniature theatre. But there are no 
remains that have been found showing us an implementation of this 
invention. So only the Greek computer from Antikythera shows us the 
ingenuity of Greek engineers during the 1st century BC. 


Key Links 


The Antikythera Mechanism Links 
www.giant.net.au/users/rupert/kythera/kythera5.htm 


The ‘Computer’ of Antikythera 
www. mlahanas.de/Greeks/Kythera.htm 


The Antikythera Mechanism’'s Implications 
http://ecat.sas.upenn.edu/rrice/apagadgt.html 


An Ancient Greek Computer | 
www.giant.net.au/users/rupert/kythera/kythera3.htm 


The Antikythera Mechanism 
www.math.sunysh.edu/~tony/whatsnew/column/antikytheral- 
0400/kythi.htmi 
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Inertia and boredom can be taken out of the workplace with open source collaboration tools 


and some lassitude, says the Luddite 


The Good Soldier Skat 


reativity and boredom aren’t happy 

bedfellows. The eponymous narrator of 

Kiddar’s Luck, a novel by the great but 
sadly forgotten Geordie writer, Jack Common, 
asserted that going to school had taught him 
one essential faculty, “with which every school 
infaltibly endows its pupils, that of being bored. 
It is important, of course, that every child should 
in the course of time become fitted up with this 
ty. If they didn’t have it, they 
would never put up with the jobs they are going 


negative capa 


to get, most of them, on leaving school. 
Boredom, or the ability to endure it, is the hub 
on which the whole universe of work turns.” 

We don’t have to agree with every 
facet of this sentiment to recognise that 
too many employers deprive their 
employees of the ability to take the 
initiative and make creative decisions, and 
that the end result can often be a sullen 
or careless workforce that does just what 
it has to to make ends meet. Work doesn’t 
have to be like this, and much could be 
learned, in software development 
environments at least, from the example 
of the open source development model, 

(if such a thing exists). 

In the world of Free Software, anybody 
from any walk of life can contribute to the 
whole, and find a sense of achievement as 
an equal partner, or even as a star, ina 
more convivial world where the measure 
of your worth is the quality of your 
contribution and the honest appraisal of 
ity to fit into the 
mould, or to climb the ladder of corporate 
respectability. At one extreme, Free Software 
projects abound with high-achievers. At the 
other end, those who have made a mess of their 


your peers, rather than your a 


academic careers, or have developed 
enthusiasms far removed from their working lives 
and academic opportunities, are able to dip into 
the code and make a difference in an 
atmosphere that is ultimately democratic. 

The informality of the open source model, and 
its ability to allow participants to find their own 
level, encourages innovation beyond the reach of 
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commercial structures. The critical factor is that 
all development is subject to peer review, 
enabled by collaborative software tools such as 
Subversion and CVS. Everybody has the right to 
contribute to the best of their ability, and make a 
difference. All too often in the world of work this 
right is sacrificed to the necessity of knowing 
your place, and keeping to the timetable. As 
Common observes: “The golden rule of the 
perpetually-bored is Punctuality,” 


ALICE KNOWS THE TRICKS 
Not so long ago, | lived in the East End of 
London and travelled fifty miles north to work, 


running against the tide of commuters pouring 
into the city every day. | caught a train from 
under the great Victorian arch of King’s Cross 
station, and slipped into the “mobile free” quiet 


carriage, where at least ten fellow trave 
would pick up their mobiles and shout “Hello, 


TS 


it’s me. I’m on time!”, after which they would 
pull off their jackets, take out their laptops, and 
play solitaire until the train reached the next 
station fifty miles up the fine. 

Being above this sort of thing, | would play 
Lieutenant Skat, a card game written by Martin 
Henni for KDE. Lieutenant Skat can be played as 


a multiplayer game over the network or as a 
single user game against the machine, which 


disguises itself as someone called 
other game of cards fit to play on a train 
journey, Lieutenant Skat is addictive and 


e. Like any 


annoyingly compulsive. As soon as you have 
finished one game you begin another, although 
you can’t say why or what for. You are hooked. 
Unlike most other card games that can be 
played by a single user, Lieutenant Skat has a 
skill component, and Alice knows ail the tricks... 


A HACK AMONG HACKERS 

| was a consultant software engineer at the 
time, a contract programmer, a hack 
among hackers, working for a company 
that was once part of a nationalised 
industry. This company had acted as 
newly privatised campanies often do. As. 


soon as the initial share issue was 
complete, the directors set about paring 
down the workforce. 

Downsizing was the wisdom of the 
eighties and nineties, just as dumbing 
down has become the wisdom of the 
current decade. Downsizing was 
immediately effective - cutting the 
workforce trimmed the wage bills and 
increased share holdings and profits in 
the short term. The share holders loved 
it, for the first six months at least, and 
then discovered that all too often 
downsizing cut deep into the bones of 
the organisation, because the first people 
to go, low down the organisational tree, were 
often the ones who pulled the strings that made 
things tick. As anybody who has worked on a 
building site will tell you, the Jlabourers who 
shovel the dirt often know the job better than 
the architects and surveyors who walk the site in 


and suits. 
The project | was working on was a perfect 


wel 


illustration of this reality. We were replacing a 
huge high-tech piece of software that had been 
written in a matter of months by four 
employees in the seventies. This ancient but 
highly specialised software, written in Fortran lV, 


and ported at intervals to more modern 
hardware, had kept the organisation gaing, 
with a patch here and a patch there, for twenty 
five years. But those who knew the ins and outs 
of the software had been downsized... 

So when the new realities set in, and new 
criteria for the software had been defined, the 
company resorted to hiring contractors, 
sometimes recruited from among the ex- 
employees who had been downsized, at 
exorbitant rates. There were sixty of us, 
managed by a team that had been parachuted 
in from a City consultancy, whose job it was to 
audit the project, and graduate project leaders 
freshly employed from Oxbridge colleges, who 
didn’t have a clue. 

Our incentive was that we were extremely 
well paid. Our disincentives were the audit trail, 
and a stack of wrong-headed software decisions 
that had been made at the management level. 
The main body of the software was written in 
Fortran on Alpha machines running VAX. Other 
parts were written in C on UNIX, and Visual 
Basic on Windows, which doomed the project 
to instant obsolescence. Because we were 
freelancers, in receipt of fat pay cheques, there 
was little incentive to get to the end of the 
project, so we sat at our desks and played 
Lieutenant Skat, and watched the project 
revolve around us. 


BEING SVEJK 
But, our chief gripe was the audit trail. 
Everything went through the project librarian. 
Every change to the code required a form, and 
approval by a project leader. Every change 
required testing against a previous version of 
the code. No more than one routine could be 
changed at a time. Each change had to be 
checked by another coder, and signed off by 
the project leader. A change to a line of code 
would take a week or more to take effect. No 
rewrites could take place. The procedures were 
more important than the realities, and fixing 
errors in the code was often more trouble than 
it was worth. 

| joined the project a year into its stately 


The Luddite @ 


The informality of the open source model, and 
its ability to allow participants to find their 
own level, encourages innovation beyond the 
reach of commercial structures 


progress, and left nearly three years later, by 
which time the cost had risen by governmental 
proportions, and there was still no light at the 
end of the tunnel. We had been chosen ta 
work on the project because of our skills, but 


our skills were an irrelevance to the project. As 
a consequence, we were contributing work 
that was way below our collective abilities. We 
twiddled our thumbs, and played the fool, or 
sabotaged the project by not giving what we 
were able to give, being the Good Soldier Svejk 
and subverting the common purpose - not 
because of indifference, but because of enforced 
inertia, compounded by boredom, and driven 
by corporate addiction to a set methodology. 
No-one was encouraged to take the initiative, 
and say what everybody knew, that the project 
just wasn’t working, and that any four or five of 
us could have rewritten the whole project from 
scratch in a fraction of the time, at a fraction of 
the cost, given a proper specification and a 
certain level of independence. 


Boredom was the essential factor. As in so 
many work environments, our willingness to 
make a creative contribution to the success of 
the project was taken away from us by lack of 
trust and suppression of initiative. The 
boredom had set in. This stands in stark 
contrast to the progress of the more successful 
Free Software projects, where users and 
developers make huge contributions despite 
the lack of a financial incentive. Why should 
this be? 


PARABLES AND TALENTS 

Commercial and government organisations 
have a lot to learn from Free Software 
development models. Open source projects 
such as Linux and Apache have shown that 
software development is often more successful 
when developers and users are freed fram the 
shackles of the formal process. 


The “release early, release often” philosophy 
common to many Free Software projects has 
increased end-user involvement in the 
development process and enhances team 
communication. More importantly, open source 


development models encourage participation at 
all levels by all contributors. Your ability and 
your skill finds its own level, untrammelled by 
the interference of unknowing management. 
The mistake is to imagine that this process is 
entirely informal. It isn’t. 

CallabNet, for instance, which was founded 
by Brian Belhendorf, a co-founder of the Apache 
Software Foundation, is a company that has 
dedicated itself to translating the open source 
software development model into commercial 
software environments, with considerable 
success. The company’s products, Sourcecast 
and Subversion, have been deployed in a wide 
range of Fortune 100 companies. Such tools, as 
commonly used by Free Software projects, allow 
for scalable collaborative development, and 


improve team communication. Archiving is 
automatic, and many of the documentation 
chores are eased by automated processes. 

Forward looking management would also 
look at the way that those involved in open 
source projects find their level because they 
are able to contribute according to their 
interests and talents, rather than according to 
arbitrary selection, based on length of service 
or adherence to the rules. A recruitment 
policy that encourages involvement and 
responsibility will encourage greater loyalty 
and committment, engendering 
improvements in productivity. Such a policy 
would also allow employees to freely 
contribute to multiple projects, to encourage 
collaboration and creativity. 

Alternatively, we can take a lesson from 
Kiddar, and assume that “most of us are unable 
to survive being educated. We learn reading 
and boredom, writing 
and boredom, 
arithmetic and 
boredom, and so on 
according to 


in the 
end it is quite certain 
you can put us to the 
most boring job there 
is and we'll endure it.” 


curriculum, 
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Jono Bacon begins a new voyage to explore the popular world of LAMP web development 


Lighting the LAMP 


Welcome to a brand new series that is going to cover the expansive and 
interesting world of the LAMP platform. The LAMP system is comprised of 
a number of different tools that work together to form a complete 
database driven web development platform. These different toals give you 
the ability to create dynamic, database driven, flexible and efficient 
websites. 

In the last few years, the LAMP system has gone on to develop into an 
impressively functional and efficient system. A number of large 
organisations, small to medium businesses, students and educators have 
gone on to use the LAMP platform, and LAMP is increasingly popular for 
building demanding web applications. This has increased the awareness 
and demand for skills in the different parts of the LAMP system. 


THE COMPONENTS 

The entire LAMP system is comprised of four core technologies that satisfy 
a different need in the web development and web hosting area. These 
four components include: 


@ (Dinux - this will require little intraduction, but Linux forms the 
Operating System part of the LAMP platform. All of the other 
components run on Linux but can also run on other Operating 
Systems such as Windows, Mac OS X and BSD. 


@  (A)pache - Apache is a web server and it gives you the ability to 
distribute your web pages to a web browser. Although the web server 
does not really adjust your website’s content dramatically, if at all, it is 
an essential part of the system if you want to make a publicly 
accessible website. Whenever you connect to a website in your web 
browser, you will be connecting to a web server, and there is a good 
chance that the server is Apache; 68% of websites on the Internet are 


run on it. 


@ (MySQL - MySQL is a database management system that is used to 
store the different types of information associated with your website. 
Databases are useful in that they store the information you need in 
structured and ordered ways. This gives you the ability to perform 
different types of searches (called Queries) to get different types of 
information for your website. MySQL is one of a number of of Open 
Source databases, but has been particularly popular due to its ease of 
use and performance. 


@ (PHP - Of all the different LAMP components, PHP is possibly the 
most important. PHP is a programming language that was developed 
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for creating web applications. The look and feel has been likened to a 
combination of bash shell, C and Perl, and the language provides a 
huge range of functionality for different types of programming. You 
can think of PHP as the glue that connects each of the LAMP 
components and your desired functionality together. The majority of 
this series will be exploring the many facets of PHP programming. 


INSTALLATION 

Instead of us devoting a few issues to installing the LAMP software, we will 
instead focus on configuration as opposed to installation of the packages. 
All of the LAMP components are packaged (and often included) with all of 
the major distributions and if you refer to the software installation tool 
included with your system, you will be able to install the right packages. 


You should install the following packages: 


Apache 1 or Apache 2 with the ‘prefork’ MPM (see the Apache 2 and 
PHP boxout) 

The mod_php4 Apache module 

MySQL 

The MySQL PHP extension (You may not need this if the version of 


PHP you are using includes support for MySQL) 


When we have installed the software, we can begin by configuring 
Apache. You will find that you have some Apache configuration files in 
fetc or fetcfapache and the main configuration file that we need to work 
with is called httpd.conf. Everything to do with Apache is configured in 
this file, which controls the many different features of the web server, and 
gives the user the ability to tune Apache to meet specific needs. In 
addition to this file you may have a modules.conf file that lists special 
modules that can be used in Apache. This file can be automatically 
generated by some versions of Apache. 

The httpd.conf file consists of a number of Directives and settings. 
These special commands allow you to configure how different parts of 
Apache work and most of the directives are comprised of words beginning 
with capital letters with no spaces. As an example, there are the 
LoadModule, VirtualHost and Include directives. Some of these directives 
also form blocks. Take this for example: 


<lfModule mod_status.c> 
ExtendedStatus On 


</lfModule> 


In this example we use the IfModule directive to see if the mod_status.c 


module is present, and if it is we set the ExtendedStatus directive to 
On. You don’t need to know what these directives do yet, but 
understanding the parlance of Apache 
software for different uses. 

The first step is for us to ensure that Apache is loading our PHP module. 
This module is called mod_php and is usually found in /usr/lib/apache/ 
[version]/. We will need to load this module into Apache via the httpd. 


conf file. You should add this line to the file: 


be helpful for configuring the 


LoadModule php4_module /usr/lib/apache/[version]/libphp4.so 


You will need to change [version] to the version of Apache that you are 
using. In addition to adding the module, you will also need to specify that 
-Php files are handled by the PHP engine. To do this, you should use an 
AddType directive for PHP and PHP source cade (files that display PHP 
code) files. These lines will make the PHP module handle any pages 
ending in .php or .phps to ensure that they are processed and not just 
treated as normal HTML files: 


AddType application/x-httpd-php .php 
AddType application/x-httpd-php-source -phps 


Whenever a user visits a web address such as http://www.linux.com/, the 
first file that is loaded is called index.html, index.php or another type of 
index file. We need to add an index type for PHP to Apache to allow this 
to work. We do this by adding index.php to the Directorylndex directive: 


<IfModule mod_dir.c> 

DirectoryIndex index.html index.htm index.shtml index.cgi 
index.php 
</IfModule> 


The final step is to create an area where our web pages will be stored. This 
is set in the httpd.conf file with the DocumentRoot directive. There will be 
a default setting included and it may point to /var/www or another 
location. If you wanted to set it to /home/bob/www you could edit the 
directive like this: 


DocumentRoot /home/bob/www 


TESTING YOUR INSTALLATION 

With our software installed and configured we are ready to check that it 
actually works by restarting the Apache server. Restarting Apache varies 
between distributions, but most distributions include a toot to manage 
system services and start/stop/restart them. You can also restart it with the 
following command: 


apachectl restart 


You should now create a new file called index.php in the DocumentRoot 
location and add the following code: 


<?php 
phpinfo(); 


?> 


When you are running a web server on your PC, you will need to access 
your pages from the web server. There is no point in just loading the 
/home/bob/www/index.php file with the File->Open File option in the 


browser; this will just load the text file. We need to access the file so that 
Apache can process our PHP. To do this we use the Loopback Address. 

The loopback address is a special IP address (127.0.0.1) that refers to 
the computer you are using. When you type this address into a web 
browser, the browser will look for a web server on the computer and serve 
you a page from the DocumentRoot. We can therefore access our page by 
entering this address into our address bar: 


http://127.0.0.1/ 


When you access this address, you should see a lot of information about 
PHP displayed on a page in the web browser. This information indicates 

that PHP working well. In our code, we created a PHP block (everything 

between <?php and ?> is understood as PHP) and we used a special PHP 
feature called phpinfo() to display general information about PHP. If you 
see this general PHP information it means that Apache is understanding 

the PHP phpinfo() feature fine and your setup is working. 

If for some reason you don’t see the general PHP information and 
instead just see the code that we added to the file, this means that your 
Apache setup is not understanding PHP. You should check your httpd.conf 
file to ensure that the PHP module is being loaded and that you have 
added the LoadModule, AddType and DirectoryIndex directives. 


MOVING FORWARD 

We have already reached the end of the very first part of our LAMP series 
and you should have a working Apache and PHP setup. As with any great 
voyage, a watertight and reliable vehicle is always essential for making 
Progress and this month we have started to create our development 
environment. This is the first step in a number of changes and additions to 
our working system; as we progress further through the series, we will 
continue to refine our system to work as efficiently and effectively as 
possible. 

Next month we are going to begin creating some simple PHP scripts 
and take a gentle stroll through some of the features that PHP has to offer. 
These initial baby steps will cement our knowledge before we move on to 
cover more elaborate and expansive topics. See you next month! 
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Setting up your webserver for encrypted traffic is vital for any kind of financial system or 


confidential application. This tutorial will talk you through the creation of a self-signed 


certificate or application to a trusted third party, and setting up Apache to work with encryption. 


Securing Apache 


with SSL 


By David Tansley 
Secure Socket Layer, or SSL, is the standard technology used to increase 


the security of a connection from a browser to a web server. In this article | 


will look at using SSL with Apache, the dominant web server on GNU/ 
Linux and many other platforms. As every internet shopper knows, a 


browser with a secure connection to a web site displays a padlock icon in 


a closed position; this indicates that traffic to and from the server is 
encrypted. The URL of the secure server will start with https: rather than 
the usual http: of non-encrypted sites. 

SSL is an open standard protocol designed for the transfer of any 
sensitive information over the internet, running above TCP/IP and below 
HTTP. When using SSL the server and client can exchange secure 
information after being authenticated by the use of encryption keys. 

The packages needed by Apache for SSL to function are mod_ssl and 
open_ssl. The first module provides cryptography via SSL and Transport 


Layer Security (TLS), while the second contains a toolkit which enables the 
creation of private keys and certificates. Once these Apache packages have 


been installed, Apache needs to be restarted: 


# /ete/re.d/init.d/httpd stop 
# /etc/rc.d/init.d/httpd start 


Be sure to check Apache’s error log for errors, or any inconsistencies. 


THE KEYS 

In the simplest possible method, symmetrical encryption is used; the 
same key is used to both encrypt and decrypt. When sending keys via a 
third party, there is no way of knowing for certain that the key arrived 
safely and was only delivered to the intended person - obviously a big 
problem when dealing with data communication over the Internet. 


Fortunately a solution is at hand; use two keys instead, a private key and a 
public key. The server generates both these keys, and as its name suggests 
the public key is available to anyone who wants to read it. This public key 


is used to encode the data that is sent back from the client to the server. 


The private key is kept on the server in a secure location; this key is used to 


decade incoming communication. 


Using these pairs of keys allows the server and client to communicate in 
private, since only the server that holds the private key can read messages 


encrypted with the public key. Many clients can hold the public key but 
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there can only be one private key holder. A server can have many private 
keys, but all of these will be randomised and unique; an ISP will usually 
have many private keys for the different domains it hosts. 


DIGITAL CERTIFICATES 

A Digital Certificate is an electronic document used to identify the 
provider of a public key, designed to stop impersonation or the misuse of 
that key. Certification Authorities (CA's) issue certificates, these are trusted 
companies that verify the identity of the site in question. This type of 
process is akin to applying for a passport - you need to provide proof of 


who you are, just as you would supply a birth certificate and a testimonial 


from an outstanding citizen at the passport office. 

When applying for a Digital Certificate, the CA will check who you are 
through various means. At the very least this will include proof of your 
identity, generally a copy of your company or organisation’s registration 
certificate and a hard copy from the WHOIS domain name database. Once 
a certificate is issued, which can take up to a week, the certificate will bind 
the public key to the name on the certificate, usually a fully qualified 
domain name, though not necessarily so. Only a public key certified in this 
way will work with the corresponding private key. 

In this tutorial we will generate our own temporary certificate; the 
process is similar to when using the services of a CA, but of course our 
certificate will not be signed by one. When you have a CA signed 
certificate, the client will automatically acknowledge the certificate and 
thus secure communication begins - the CA is also guaranteeing the 
identity of the organisation or company to whom the certificate has been 
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issued. With a self-signed certificate, some browsers will prompt the user 
that a unsigned certificate is about to be loaded, but of course you still get 
the encrypted connection. 


THE PROCESS OF SSL 

SSL-aware software on the client, typically a web browser, checks that a 
server's certificate is valid and has been issued by a Certificate Authority 
found in the browser's list of trusted CA’s. The SSL client authentication 
allows a server to confirm user identity, using the same technique. Here’s 
what happens: 


The client sends a request to connect 

The server sends a signed certificate (this includes the public key) 

The client verifies the certificate signer, by checking its acceptable CA list 
The client generates a session key to be used for data encryption, 
encrypts it with the server's public key and sends the result to the server 
@ = The server uses the private key to decrypt the client-generated session key 
® Client and server exchange encrypted information 


CREATING THE PRIVATE KEY 

A cipher key needs to be at least 1024 bits in length; anything below this 
is not considered good enough for secure commercial communication. 
Using the OpenSSL utility, an RSA based key using the triple DES cipher 
can be generated: 


# openssl genrsa -des3 1024 > /etc/httpd/cont/ssl.key/server. 
key 


The above command outputs the key to the file server.key, located in the 
/etc/httpd/conf/ssl.key directory. If you host more than one domain name 
on your server, then it makes sense to prefix the key with the domain- 
name like so: 


# openssl genrsa -des3 1024 > /etc/httpd/conf/ssl.key/www., 
somecompany.key 


When generating a key OpenSSL will prompt for a password or pass 
phrase to be entered, and it will prompt for this password every time 
Apache starts up. Do remember to document the password in a place 
where it can be obtained by all production system admins, for obvious 
reasons. Alternatively, it may not be appropriate within your business 
operating environment to have Apache prompt for a password every time 
it starts up. In that case create a non-encrypted key, by not specifying the 
-des3 option like so: 


# openssl genrsa 1024 > /etc/httpd/conf/ssl.key/server.key 


warning, not much extra random data, consider using the - 
rand option 

Generating RSA private key, 1024 bit long modulus 
webb 

ttt 

e is 65537 (0x10001) 


The file permissions on the key need to be made both read and write by 
root only. If this task is not carried out, a user or some third party could 
get hold of the key and - heaven forbid - impersonate your secure server. 


# chmod 600 /etc/httpd/conf/ssl.key/server.key 


GENERATING A CERTIFICATE REQUEST 

As discussed previously, we will be looking at creating a self-signed 
certificate. However, if you do need to create a certificate request for a CA, 
you can do this with the following command: 


# openssl req -new -key /etc/httpd/conf/ssl.key/server.key -out 
/etc/httpd/conf/ssl.csr/server.csr 


This command will use the private key just created (server.key) to generate 
a certificate request file (server.csr). You will be prompted for the password 
or phrase you gave when the private key was generated. A series of 
questions will follow, and when completed the next step is to send the 
request file to a CA. Three commonly used CA’s are thawte.com, verisign. 
com and instanstssl.com. See these web sites for easy to fallow 
instructions, but do not expect much change out of £300 for a 128 bit 
certificate from a major CA. Shop around, and you can get a certificate for 
as a little as £80. 


GENERATING A SELF-SIGNED CERTIFICATE 

A self-signed certificate should usually be considered a temporary solution 
until you receive a valid one from a CA. Having said that, it is quite 
common to see self-signed certificates used internally within company 
LANS and WANS. 

To create a self-signed certificate your private key is required, which we 
have generated already. As with the Certificate Request, you will be 
prompted for the password or phrase you entered when creating the 
private key. If you decided not to enter a password for your key, then you 
will therefore not be asked for a password when generating your 
certificate: 


# openssl req -new -key /etc/httpd/conf/ssl.key/server.key - 
x509 -days 365 -out /etc/httpd/conf/ssl.crt/server.crt 


Using configuration from /usr/share/ssl/openssl.cnf 

You are about to be asked to enter information that will be 
incorporated into your certificate request. 

What you are about to enter is what is called a Distinguished 
Name or a DN. 

There are quite a few fields but you can leave some blank 
For some fields there will be a default value, 

If you enter ‘’, the field will be left blank. 

Country Name (2 letter code) [AU]:GB 

State or Province Name (full name) [Some-State]:Essex 
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Locality Name (eg, city) []:Grays 

Organization Name (eg, company) [Internet Widgits Pty Ltd]: 
Bumper Ltd 

Organizational Unit Name (eg, section) []:Payroll 

Common Name (eg, your name or your server’s hostname) []: 
www.bumper.co.uk 

Email Address []:dtansley@bumper.co.uk 


The above command will generate a file called server.crt containing the 
self-signed certificate located in the directory /etc/httpd/conf/ssl.crt/ using 
the private key (server.key) created earlier. The -days parameter indicates 
how long the certificate will be considered valid, after when it will be 
rejected by a browser. In this example the ce 


cate will be valid for a 
year; alternatively you could make a temporary certificate valid for 28 days 
if you plan to replace it with one issued by a CA. 

The -x509 parameter indicates the standard which is used when 
creating certificates. It defines the data and signature parts of the 
ate, where the data will consist of the domain name, serial number, 
public key and issuer of the certificate. 


When answering the series of questions some of them have a default 
answer, and you can hit enter to accept these defaults if you wish. The 
Common Name field should match up with the URL of your web server, but 
if you are on a private network you can input the server name here instead. 


INFORMING APACHE ABOUT SSL 

If you compiled Apache from source you will find you have a separate 
ssl.conf file where all the SSL options must qo. Alternatively you can use the 
httpd.conf file; although Apache is pretty much SSL aware the configuration 
will need checking, especially on the secure port number and the location 
of the certificates and keys. Most entries go inside the <VirtualHost> block: 


Listen 80 

Listen 443 

<VirtualHost _default_:443> 

# virtual servername - same as your web server 
ServerName www.bumper.co.uk 

# virtual document root - change to suit 
DocumentRoot “/var/www/htm!” 

# SSL Engine Switch: 

SSLEngine on 

# server certificate 

$SLCertificateKeyFile /etc/httpd/conf/ssi.key/server.key 
# Server Private Key: 

$SLCertificateFile /etc/httpd/conf/ssl.crt/server.crt 
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</VirtualHost> 


RUNNING SSL 


The next step is to restart Apache again: 


# /etc/rc.d/init.d/httpd stop 
# /ete/re.d/init.d/httpd start 


if you generated your key with a pass phrase then you will be prompted 
for this as Apache starts. HTTPS will listen on port 443, with normal HTTP 
listening on port 80 as usual. Use netstat -a to determine that both HTTP 
and HTTPS are listening for requests. 


# netstat -a | grep http 
tcp 0 O*:http id 
tcp 0 O*:https — 


LISTEN 
LISTEN 


If you do not get an entry for https, then the secure server is net running. 
Check Apache’s error log for further information. 

OpenSSL can also be used to test the handshake of your secure server. 
The following command will produce a long list of connection details, 
using the key and certificate information that is currently installed. This 
command is a good method for diagnosing any further problems if HTTPS 
is running but a browser cannot connect to the secure server. It also gives 
a good grounding in the process of how OpenSSL interacts. 


# openssl s_client -connect localhost:443 -state 


Now you can try to access your secure web page. Point the browser to 
the site in question, or on the same machine use https://localhost as the 
URL. Please note there is no need to specify the port number at the end 
of the URL for a secure connection. 

Depending on the type of browser being used, it may prompt for a 
series of confirmations about the site before the certificate is loaded; other 
browsers might just prompt once. When the connection is established, by 
clicking on the padlock icon the certificate details can be displayed. With a 
self-signed certificate, the browser should inform the user that the 
certificate cannot be trusted, although the connection is still encrypted. 
For a certificate from a CA you will not get this warning; instead the 
browser will display who the issuer is. You are now ready to begin using 
Apache for the transfer of sensitive data with increased confidence! 
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@ Letter from Asia 


The first of a regular series on the progress of Linux and Free Software in Asia, 


by Frederick Noronha 


A continent gets talking 


t's a cliche to call Asia a silent, mysterious 

continent. Don’t let that lack of 

communication lull you into believing not 
much is happening here. Two reasons. Firstly, 
the multiplicity of languages and scripts make 
communication more difficult than ever. 
Secondly, ours are oral cultures, where the 
written word is in short supply. But let's look 
beyond. This column plans to report from Asia, 
specially South Asia (where this correspondent 
is based, close to the coast of Goa) on what's 
happening in the FLOSS world. Don’t ask what 
FLOSS is. It’s the term popularised, among 
others, by the South Asian expat based in the 
Netherlands, Rishab Aiyer Ghosh, who already 
has a couple of prestigious studies under his 
arm. This term, Free/Libre and Open Source 
Software, also describes the twin mavements 
rather effectively, and is acceptable to Open 
Source guys as much as to others like the Free 
Software Foundation guru and man-of-strong- 
views Richard M Stallman. 


ASIA OSS 
Early September was time for the 
Fourth Asia Open Source Software 
Symposium (AOQSS) in Taiwan. 
Earlier meetings were held in 
Thailand, Singapore and Vietnam. 
Japan’s Center of International 
Cooperation for Computerization 
has hosted the event, together with 
local co-hosts. This time, the local 
co-host was Academia Sinica, and 
the event was held from September 
1-3. 

It’s the organisers point of view that while 


many “organizations, communities and 
agencies” are promoting FLOSS, “there is an 
urgent need to help set some direction and goal 
setting in what is otherwise a haphazard and 
undirected process”. They arque that a regional 
sharing of knowledge and experience in this 
realm is needed. 

These meets began in Phuket, Thailand in 
March 2003. For understandable reasons, such 
tech-talk shops don’t make it to the international 


news. Maybe this reflects the weakness of the 
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international media in these parts of the planet. 
Or, just the strength of local languages. 

Perhaps it has also to do with the reluctance of 
the organisers to go in for early publicity. All the 
same, a continent covering such a large part of 
humankind obviously cannot be ignored. 

Officials, researchers, and business or industry 
representatives are present at the meets. Some 
70 participants have taken part in the by- 
invitation-only meets. 

Initially, the forum was concentrated around 
South East-Asia. Since Singapore in late 2003, the 
organisers took the trouble to extend and 
include the countries of South Asia (India, 
Pakistan, Bangladesh and Sri Lanka). 

Post-symposium CDs containing the 
presentations of delegates offer some (partial, of 
coursé) insight into what's happening in these 
diverse lands, from which one otherwise hears so 
little. 

in past meets, some special sessions looked at 
legal issues in FLOSS (led by the Taiwanese), 
sessions on standardisation, and open source 


The Hindi translations have been 
progressing steadily. Ravishankar 
Shrivastava has completed 90% 
of KDE and 70% of GNOME. With 
another translator Rajesh Ranjan 
oining (who is working on 
NOME), it’s getting faster 


software for e-learning. They don’t talk about 
countries here, each one is an “economy”. 

Said a pre-conference announcement: “This 
time (in Taipei), we would like to discuss concrete 
ways for cooperation based on the (earlier) Hanoi 
Statement. We would like to have participants 
from business as well as from official 
organizations, academia, and the community, as 
(the meet will be) focusing on OSS from the 
business point of view.” 

See the Asia OSS website at: http://www.asia- 
oss.org/ 


STRIPPED-DOWN IT? 

News coming in early August says Microsoft is 
planning a ‘no-fi 
Windows XP operating system for the ‘developing’ 


’, low-cost version of its 


world, including Asia. This would offer lower- 
resolution graphics, restricting the ability to 
connect computers via a network, and allowing 
only three programs at any one time. 

This could well backfire and bring more 
mindshare to FLOSS. Do those with lower 
purchasing power deserve only the pirate-label 
or inferior tools? 


WANTED: MENTORS 

Can you help mentor young Asian techies 
looking for suitable projects? if so, volunteer at 
https: //mail,sarai.net/mailman/listinfo/pre 

Meanwhile, if you want to take a look at 
Asia’s (still young) response to sourceforge.net 
then visit http://www.sarovar.org As of August 
2004, hosted projects 200+, and registered 
users nearly 1400. 


ASIA SOURCE 

Sometime in February 2005, Asia 
Source plans to pitch camp 
probably at Bangalore, South 
India’s home-brewed alternative to 
Silicon Valley, according to early 
plans being worked out here. 

What's it? Asia Source will bring 
in about a hundred tech support 
professionals, trainers and 
consultants working with the non- 
profit sector. They will meet 
together with activists and NGOs 
from across South and East Asia. 

The aim: to facilitate learning and exchange 
between these two communities, in particular 
around the practical deployment of Free/Libre 
and Open Source Technologies. The intention is 
to move beyond conceptual discussions of the 
benefits of FLOSS and technology in general, 
and in to practical skill sharing between non- 
profits in the region. 

Source events include week-long workshops, 
designed to create hands-on opportunities for 
practical learning and exchange and to make 


connections with regionai peers. 

Sessions range from skill building on 
alternative access solutions, from setting up an 
‘open’ NGO office and providing on-going 
maintenance and support, to specific 
‘screwdriver sessions’ on alternative access and 
DIY (do-it-yourself) technology, such as making 
wireless antennas. 

Organisers said sessions on strategic 
technology range from deploying such 
technologies within advocacy work, such as 
tools for organising and collaborating, to 
security for high risk groups. There will also be 
conceptual sessions for discussion and debate 
on issues such as localisation and the challenges 


We would like to have 
‘hel eg from 
usiness as well as 
from official 
organizations, 
academia, and the 
community 


of deploying open source within the sector. 

Previous source events have taken place in 
Croatia in September 2003, and Namibia in 
March 2004. Future full-scale source events will 
take place in South East Asia (February 2005) 
and West Africa (May 2005) and on a smaller 
scale in Central Asia and Latin America. 

Asia Source is being organised by Mahiti.org, 
a Bangalore based organisation focused on 
providing IT services to the Indian voluntary 
sector, and Tactical Tech, an Amsterdam based 
NGO working on the deployment of technology 
within the civil society sector in developing and 
transition countries. 


SOUTH ASIAN LANGUAGES 

IndLinux is the network working on language 
solutions for GNU/Linux in South Asia. Check out 
http://www. indlinux.org, and for the mailing lists 
go to hitps://lists. sourceforge. net/lists/listinfo/ 
indic-computing-users [Other Indic-Computing 
mailing lists include -devel, -standards, - 
announce] 

One recent quote: “The Hindi translations 
have been progressing steadily. Ravishankar 
Shrivastava has completed 90% of KDE and 70% 
of GNOME. With another translator Rajesh 
Ranjan joining (who is working on GNOMB), its 
getting faster.” 

But india, with a dozen-and-half official 
languages, is not about Hindi alone. So, the 
alpha release of the Rangoli live CD is a 


ingual distribution. The alpha version has 


KDE with Hindi, Bengali and Tamil interfaces. The 
beta release was scheduled for the end of August. 
In July, one of the key proponents of this 
network Guntupalli Karunakar 
<karunakar@freedomink.org> had been to 
Bhutan to give a training on localization for the 
national language, Dzongkha. What's 
interesting is that the solutions from South Asia 
could help work across national boundaries 
(Urdu is relevant in both Pakistan and North 
India, Bangla in Bangladesh and the Indian state 
of West Bengal). Further, the lessons learnt from 
this experiment can be shared across languages. 


COMMERCIALISING OPEN SOURCE 
University of Illinois assistant professor 
Ramanath and his colleague Mu Xia recently 
announced plans for a study on the 
commercialisation of Open Source software in 
the ‘developing countries’. Ramnath 
commented: “We are interested in the growth 


of this phenomenon in India, China and are 
contrasting it with the growth of the movement 
in North America.” 

They’re scholars studying the information 
technology industry, are say they hope to study 
China and India’s OSS development and 
business models. By comparing these models to 
that of the West, they hope to “better 
understand the role OSS can play in today’s 
software market”. 

This survey is being conducted on Chinese, 
Indian and western OS community members. 
They plan to finish the survey result analysis and 
the research paper this autumn. See the 15- 
minute survey at http://www.surveymonkey. 
com/s.asp?u=23872580226 or contact Prof 
Ramnath at <rsubrama@uiuc.edu> 


JAPAN, CHINA, AND A STANDARD 
China recently denied that it ever intended to 
develop an isolated Asian standard for Linux, a 
move which is said to be feared by some in 
Japanese industry. 

“We have never promoted a so-called ‘Asian 
standard’ in Linux development,” Ding Wenwu, 
director of the Ministry of Information Industry 
(MIl)‘s electronics and information products 
management department, was recently quoted 
saying in the official People’s Daily. 

The Chinese, Japanese and South Korean 
governments last September formed a strategic 
alliance to promote Linux development and 
applications in Asia. See http://english. 
peopledaily.com.cn/200408/10/eng20040810_ 
152443.html 


IN KHMER 


Cambodians recently got access to Khmer- 
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language email software for the first time ever. 
The Open Forum of Cambodia has reported 
that Cambodians are now able to send and read 
email in Khmer using a localised version of the 
open source email client Thunderbird, 

Until now, a native Cambodian has needed to 
be able to read in a foreign language to be able 
to send email in Cambodia. The KhmerOS 
portal, set up earlier this year to bring together 
previously isolated developers is starting out by 
providing Khmer translations of well-known free 
applications. Thunderbird was ready for use 
after just two months, according to the 
Association for Progressive Communications. 


HERE COMES THE PRINT 

India was thrilled with this development on the 
printing front. Young enthusiast Sayamindu 
Dasgupta reports that Christopher Blizzard has 
added a new feature to Mozilla which enables it 
to handle complex scripts like Hindi, Thai, Tam 
and the like through Pango. Pango provides an 
open-source framework for the layout and 
rendering of internationalized text. 

See Christopher Blizzard’s blog at 
www.0xdeadbeef.com/html/2004/08/#200408 
050820. On the downside, there are still 
problems with Arabic. However, Hindi, Tamil 
and Urdu are rendering fine. 


QUOTE...UNQUOTE 

“You wouldn’t want to wear the same style of 
clothing every day of your life, would you? 
Government users need security, and business 
users need cheap software. Linux meets both 
those needs.” -- Lu Shouqun, president of China 
Open Source Software Promotion Union, 
quoted by Reuters. Media reports quoted 
Shouqun as saying in August that the North 
Asian government alliance to promote the Linux 
operating system and reduce dependence on 
Microsoft's Windows plans to release its first 
products for China in six months. 


FREDERICK NORONHA IS BASED IN GOA AND CAN BE CONTACTED 
AT FRED@BYTESFORALL.ORG 
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@ Small world 


Jon Masters returns from the UKUUG summer Linux technical conference with news of Linux on 


mobile phones, the state of the embedded Linux marketplace, and a brief porting overview 
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his month | want to take a look at the 

current state of the embedded Linux 

marketplace, and for the more technical 
reader | am providing an overview of the kind 
of work involved in porting Linux to a new 
platform. On the news front, we can see a 
swathe of announcements from smartphone 
manufacturers touting devices running 
Embedded Linux, while SCO loses yet another 
battle in the courts - this time against 
automotive manufacturer Daimler/Chrysler. 

July featured the annual UKUUG summer 

Linux technical conference, this year up in 
Leeds. It was a good opportunity to meet 
developers and share experiences, whilst the 
talks were generally interesting and of high 
overall quality. In co-operation with several 
others, | helped to organise an Embedded 
Linux track which proved reasonably popular. 
Talks ranged from Embedded Debian to YAFFS 
(Yet Another Flash Filesystem). The conference 
also included a presentation on using Linux in 


Eddy Current detection (finding nails in walls) 


and a recount of the pain and frustration from 
a guy who has ported Linux to the XDA II 
mobile phone. 

It would seem that we are living in the dawn 
of the Linux Smartphone revolution, with a 
growing number of manufacturers announcing 


O78 Linuxuser & Developer 


Linux based products. At first we got excited at 
the news that Motorola were bringing out a 
Linux Smartphone model, but that now seems 
50 passe when we consider how many have 
followed suit. Chiefly this is still confined to the 
Asian markets, where Motorola and various 
Chinese manufacturers have enough 
dominance to offer competing products to a 
consumer testbed prior to any global launch 
we might see over here. 

MEN Micro have announced that they are 
the amongst the first to join Montavista’s self 
certification programme for companies 
producing Linux Board Support Packages 
(BSPs). MEN will use the Montavista Board 
Support Tool (BST) to carry out the 
certification, which will subsequently allow 
customers to receive the same level of support 
from Montavista as Monta’s in house solutions. 
Montavista first announced the programme 
back in May and it certainly makes sense to the 
majority of board manufacturers in going 
along with such a scheme. 

There are reports of the first ever Windows 
CE Trojan doing the rounds at the moment. 
This one (which has been named Brador) is not 
a worm because it cannot spread on its own, 
and requires the user to exchange an infected 
file with another device. Although it is not a 


Shanghai based E28's e2800+ Linux Smartphone features 
hardware buttons for camera and music control, as well as 
mouse-like buttons along the right side, including up, 
down, and okay buttons. 


serious problem at the moment, news of this 
kind does re-enforce the notion that smart 
devices are certainly not immune to security 
issues. Security often takes a backseat in 
embedded systems design and even those of 
us using Linux have had our share of exploits 
in the past. It is only a matter of time before 
one of these is used to target vulnerable 
embedded Linux devices. 


AND FINALLY... 

| would like to wish a belated happy birthday 
to the Freedos project. Linux might be all the 
range on embedded devices of today but 
Freedos has been powering small devices 
since 1994, 


Balloon is an Open hardware development board intended 
for anyone to use in their projects. Find out more at www. 
balloonboard.org 


The Embedded Linux Marketplace 


The modern embedded development world is raciical 
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project building a Linux distribution fo 


musicians and artists 
Las 


> 


he AGNULA project - the acronym originally 

stood for A GNU/Linux Audio distribution - 

first drew attention when the European 
Commission announced that it would fund the 


development of an all-in-one free software bundle 
for musicians and other artists. Based at the Centro 
Tempo Reale musical institute in Florence, Italy for 
the two year funded period, the project has now 
found a home within the Media Innovation Unit at 
Firenze Tecnologia, an agency of Florence’s 
Chamber of Commerce. 

Free Ekanayaka works full time for Firenze 
Tecnologia as the principal maintainer of the packages 
which make up AGNULA/DeMuDi, the project’s 
Debian Multimedia Distribution. “I was working at 
Centro Tempo Reale and Nicola Bernardini, one of the 
initiators of the original DeMuDi project, proposed 
that | should work on AGNULA. AGNULA/DeMuDi 
sports all the basic facilities of a general-purpose 
distribution, but it’s specifically tuned for audio work. 
The kernel is optimised for low-latency performance, 
the best sound applications available are selected and 
integrated with each other, and the menu hierarchy is 
intuitive and well organised.” 


Debian might not be the most obvious base for a 
distribution aimed at artists - who may not have any 
Linux experience at all - when other distributions have 
already incorporated user-friendly features, such as 
graphical installers. Ekanayaka argues that although 
Debian is perceived as difficult to get started with, this 
is no longer the reality. “Some Debian Developers 
when asked about the installer used to answer that 
having a wonderful package management system, 
they only needed the installer once in a lifetime! Jokes 
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Nfsical ears 


apart, the Debian installer has greatly improved 
during the last few months and it’s now reaching a 
mature stage. It’s not graphical (yet), but it’s really 
robust and simple to use, and I’m confident it will get 
even better in the future.” 

“Debian has been historically used and developed 
by system administrators for their own purposes, and 
that’s one of the main reasons for the lack of some 
important user-friendly features. However efforts like 
Progeny, Knoppix, Morphix and Skolelinux show that 
these limitations can be overcome. Considering its 
unique characteristics of openness and flexibility, my 
opinion is that Debian is potentially the best base for 
building specialised distributions. The Debian Custom 
project is currently working to provide a generic 
framework to easily develop and maintain Debian 
based distributions, and I’m sure that to stick to itis a 
good choice in the long run.” 

“Personally, | find the ‘Debian way’ easier, because 
it’s based on a few simple concepts. Of course there 
are many parts of the distribution that need to be 
improved, and that’s where AGNULA/DeMuDi steps 
in, as it transparently deals with many configuration 
and installation issues, The great thing is that these 


enhancements will eventually be integrated back in 
Debian, so that everybody can benefit from them, in 
the same way we benefit from many contributions 
that come from the other Debian based 
distributions.” 


The AGNULA project is not an official part of the 
Debian project, but it does coordinate its work with 
the Debian maintainers, as Ekanayaka explains. “We 


are trying to work as closely as possible, and I’m in 
the process of becoming a Debian Developer myself. 
We do not consider AGNULA/DeMuDi as a separate 
distribution, but rather a specialisation of Debian, 
built upon and not beside it. Ideally all the 
development should be carried out directly inside 
Debian, and AGNULA/DeMuDi should deal only with 
the presentation of what already exists.” 

Curiously, some of the Linux distributions with the 
highest proportion of proprietary components - such 
as Linspire - are also based on the free software 
Debian. Presumably there are practical advantages to 
using the volunteer-maintained Debian codebase 
rather than being a partner of a commercial 
distribution company such as Red Hat, Novell/SUSE or 
Mandrake. “My feeling is that, being completely and 
uniquely devoted to the distribution quality and user 
satisfaction, Debian has much more freedom of 
choice and is more reactive to the user feedback. 
personally fulfilled lots of feature requests, sent by 
users directly on the mailing list. The latency between 
rising a issue and solving it might be really low, 
sometimes less than one hour. Note that I’m not 
talking about security holes or critical bugs, but just 
normal wishes. The link between developers and users 
(whose difference is getting subtle) is very tight. I 
doubt that this is possible with commercial 
distributions.” 

“On the other hand, even though most Debian 
Developers do a wonderful job with their packages, 
working with Debian can be frustrating at times. 


Sometimes a developer (myself included) can turn 
into a bottleneck, due to a busy life or a vacation. 
Moreover some tools are very well documented and 
others aren't at all. Deep changes in the Debian 
infrastructure or policy can take a long time as a 
common consensus must be reached. Last but not 
least, release cycles are long and schedules are often 
delayed.” 

The AGNULA project’s work on DeMuDi has 


It's important to always provide bleeding-edge 
versions of audio software, as things are 


moving so quickly 


begun integration with the Custom Debian 
Distribution framework, which is designed to allow 
specialisation while preventing forks from the main 
Debian project. “AGNULA/DeMuDi has closely 
followed the CDD project from the early beginning. 
We've borrowed and suggested both ideas and 
techniques, and the coherence between different 
Debian-based distribution is increasing. However we 
can’t call DeMuDi an actual CDD framework yet, as 
many things have still to be developed. The Media 
Innovation Unit at Firenze Tecnologia has understood 
the importance of pushing this, and is organising a 
workshop on CDDs, inviting all the major actors.” 

With a stable and very usable AGNULA/DeMuDi 
1.2.0 release imminent, the project is making plans 
for the future - including a variant compiled for the 
PowerPC processor family widely used by musicians in 
Apple hardware. The update frequency of the 
distribution will also be addressed, as many free 
software music applications have yet to reach 
Maturity and can improve on a daily basis. “It’s 
important to always provide bleeding-edge versions 
of audio software, as things are moving so quickly. 
The key to this is probably the creation of a task force 
of Debian Developers dealing with audio. An official 
Debian Multimedia sub-project with a dedicated 
Malling list already exists, but | feel it could be even 
larger and more active.” 


THE ACID TEST 

Tim Hall is a musician from Glastonbury, England 
and an active tester of AGNULA/DeMuDi. “I'm a 
composer first and foremost, and | came to 
computers late in life with no formal training. Being 
a musician | couldn’t (and still can’t) afford all the 


I felt like 10,000 
people had just 
clubbed together to 
answer my wishlist 
and deliver the tools 
of my trade 


latest proprietary software. My first machine 
boasted a Pentium 100MHz CPU and 32MB RAM. 
Debian was the only OS that would install, and 
frankly | liked the GNU ethos of the distribution. | 
installed it in 2002 and I’m not ashamed to say | 
cried with joy. I felt like 10,000 people had just 
clubbed together to answer my wishlist and deliver 
the tools of my trade. | still feel like that.” 

“1 read everything | could download off the net 
and soon discovered that there was music software 
available. | signed up for the mailing list and apt- 
got what | could fit into my already stuffed hard 
disc. Lots of it didn’t work properly, but | was that 
awed by what my little machine was managing 
that | didn’t care. The list turned out to be one of 


the friendliest, most helpful and inclusive lists on 
the net, and in under two years I've watched 
DeMuDi become one of the most stable and 
useable music-specific distributions available. Of 
course I've upgraded a few times since then!” 

“Frequently I’ve found a fix or response to a 
problem in my mailbox the very next morning. This 
Openness is part of the uniqueness of the project 
and really inspires my enthusiasm. The experience 
of making a suggestion and seeing it implemented 
in the next few days or weeks is quite magical. So 
even if AGNULA/DeMuDi doesn’t quite do what 
you want right now, a few suggestions in the right 
places may make it happen. Even more excitingly, 
the distribution has all the tools you need to learn 
to Do It Yourself.” 


USER-FRIENDLY DEBIAN? 
Conventional wisdom is that ‘non-technical’ users, 
without a command-line UNIX background, won’t 
be able to make sense of the Debian way of doing 
things. Hall isn’t so sure: “I don’t think so, or maybe 
I became a technical user very quickly. | always 
found not being able to get under the bonnet of a 
system frustrating, as is particularly the case with 
the old MacOs, but also to a certain extent with 
Windows. Knowing that I am directly editing the 
file that the system is going to read is reassuringly 
simple to me. Having a GUI with limited options 
isn’t much use if they’re not the options you want.” 
“Most users get an ‘expert’ in to configure their 
Windows network, despite the supposed user- 
friendliness. Finding a file in /etc is no more difficult 
or easy than finding the right GUI in the control 
panel and clicking the right option In the right tab. 


Audio Libre @ 


You still have to know what you're doing to get it 
right. AGNULA's DeMuDi distribution does all kinds 
of funky things like autodetect your hardware; it 
practically installs itself and all the software you 
might need. All the dancing penguins in the world 
wouldn't make it any more user-friendly,” 

“My friends sometimes ask me to see if I can sort 
out their XP installs; looking into the control panel of 


Debian is my friend - 
Windows doesn’t even 
say ‘Hi!’ anymore 


that scares the living daylights out of me and I'm 
soon advising them to get a system that's easier to 
configure, like Debian! | used Windows for five years, 
Debian for two. Debian is my friend, as they say, 
Windows doesn’t even say ‘Hil’ anymore. | do freely 
admit that some things are a pig to configure under 
Debian-based systems. But then Windows users have 
to put up with their systerns slowly degrading, and 
becoming colonised by trojans and spyware. I'd 
sooner have a friend that occasionally refuses to do 
things unless you ask them the right way, rather 
than one who drinks all your lager and then Passes 
out in your bed. Also, the availability of support 
makes a critical difference, but that’s a fairly level 
playing field for most GNU/Linux distributions.” 

“I don’t think Windows users are naturally 
stupid, and neither are musicians. | think AGNULA/ 
DeMuDi systems, being designed by musical 
people, work in a way compatible with musical 
minds. How user-friendly Is reading and writing 
sheet music anyway? It’s a very subjective issue.” 


@ The latest version of AGNULA/DeMuDi can be 
downloaded from: www.agnula.org/ 
download/demudi 
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@ Devils and daemons 


Frank T. Pohimann explores the world of BSD advocacy 


Playing 


he culture of BSD has always been very 

different from the world of Linux, or, 

indeed, the commercial Unices. Although 
the image of snotty teenagers learning kernel 
hacking while producing Linux scheduling code 
has never been much more than a cute 
marketing ploy, Linux users were often more 
willing to make flamboyant statements about 
their favourite OS, without necessarily backing 
them up with data that stood up to scrutiny. 
They learnt from and used that trick against their 
major competitors, since they didn’t have mega- 
marketing dollars at their disposal. 


to the 


enter contractual relationships with. BSD/OS 
development was stopped once Wind River 
Systems gave up its BSD interests. 


APPEALING TO MANAGEMENT 
So, in many ways, the fundamental problem 
any BSD adapter faced was not the technical 
merits or even the lack of personnel to 
administer the system: it was the lack of clear, 
well-known motivating forces behind the BSD 
flavours that made it very hard for BSD 
advocates ta convince reluctant managers. 

The early success of BSD as a research platform 


The stability of the BSDs is guaranteed 


by a very clean and permanently available 


update mechanism that in the case of 
FreeBSD guarantees trouble-free patches 
regardless of the version of FreeBSD 
running on the target system. 


APPEALING TO SOURCE 

The crop of BSDs emerging in the 1990s 
appealed to a different group of Unix users, 
namely network administrators trying to cope 
with the beginnings of the Internet boom. Linux 
and even some commercial Unix varieties like 
SCO Unix, before it changed into a law-firm 
adjunct, were known for more innovative 
approaches to networking problems and IP 
stack implementations. But the BSDs (and in 
particular FreeBSD) appealed to a crowd dealing 
with the emergence of ISPs, medium-sized 
networks and webhosting farms - such as they 
were in the mid 1990s - i.e. mostly companies 
that were staffed by system administrators of 
some years standing. 

Moreover, BSD was also revealed in a closed- 
source avatar, namely BSD/OS, to be just as 
powerful as many of its Unix analogues. But 
there was one problem that came to piay a role 
in the minds of corporate middle management; 
and that was fact that there were no BSD 
companies, strictly speaking. Names like 
‘FreeBSD’ and ‘OpenBSD’ did not inspire 
managers who looked for companies they could 
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and its status as an operating system from which, 
for example, SunOS and OS X were derived 
somewhat surprisingly makes it more difficult to 
introduce BSD in technical organisations. It is the 
perfect OS and network software backbone for 
organisations that are large enough to provide 
their own sophisticated support. By the same 
token, large web hosting companies have rather 
unique requirements that are unlikely to be met 
by external consultants. Scale and throughput 
are enormous. Stability is vital. Microsoft or 
Macintosh software is unlikely to be stable 
enough, even though OS X is FreeBSD derived. 
FreeBSD tends to be a natural candidate for 
servers handling thousands of hits per minute. 
OpenBSD has its obvious strengths as a firewall 


allery 


for large installations, although for the reasons 
we just mentioned, OpenBSD PCs have to be 
supported by consultants or the company’s staff. 


BSD TO THE FRONT? 

Therefore - and contrary to the recent reading 
of industry Tarot by the likes of Tim O'Reilly - it 
is the niche that has been created by the very 
application the BSDs were written for that 
matters. The BSDs are not exactly exchangeable 
for other operating systems, since their stability 
and scalability can be enhanced by company 
internal staff to such a degree that they can be 
far superior to any of their competitors. 

This is not just marketing talk. Sure, Solaris 
and Red Hat Linux can achieve somewhat 
similar results, but the BSD license permits 
something the GPL cannot do: it is possible for 
larger companies to develop a specially tweaked 
BSD variety - something that happens 
particularly in the NetBSD space - without being 
under an obligation to publish the source code 
of the improvements made. It might be in the 
best interest of the company to publish the 
source code, but if the improvements are crucial 
to the company’s success, the code can remain 
closed for a little while, even though those 
responsible should be pinched by little devils 
that are somewhat less cute than the various 
BSD masccts. 


VIRTUOUS BSD 

The heavy-duty webhosting companies, the 
corporate firewalls, the ultra-stable network 
hosts running for years without rebooting or 
hardware upgrades; all of the above have been 
enabled by the communication protocols and 
standards in the industry. Yet what made open 
source operating systems great and guaranteed 
their longevity had a lot do with virtues that 


BSD operating systems were crafted to be 
stable and reliable, virtues which cannot 
be easily replicated since they have to be 
engineered on top of hardware the OS is 

supposed to be administering 


were not necessarily prescriptive, but part and 
parcel of engineering culture. To wit, it did not 
really matter what programming language they 
were implemented in or which software 
methodology was used, as long as the kernel 
code interacted well with the hardware it was 
running on. 

BSD operating systems were crafted to be 
stable and reliable, virtues which cannot be 
easily replicated since they have to be 
engineered on top of hardware the OS is 
supposed to be administering. This is even truer 
of those BSD varieties that run on hardware 
quite unlike the PC. But those very same 
strengths are actually quite difficult to sell: in 
many ways, they don’t lend themselves to 
massive marketing campaigns, since it is difficult 
to visualise the qualities of software that can 
only be reliably ascertained two to three years 
after the software has been released. In a world 
where even new OpenBSD versions are released 
three times a year, stability that can only be 
proven after several years seems a rather quaint 
selling point. 

It has been claimed that the very fact that all 
the BSDs derive from a tradition harking back to 
the early days of Unix counts against them, 
since more modern operating systems like SUSE 
Linux or Debian GNU/Linux are more attuned 
to the realities of modern data centres. This is 
slightly disingenuous, and throws light on the 
marketing problems BSD has faced: the phrase 
‘data centre’ means fairly little in a distributed 
network and suggests a concentration of 


computational and storage capacity that rarely 
exists. So, BSD-based operating systems have 
run in organisations which are hardly more than 
mom-and-pop ISPs, and at the other end of the 
scale, Yahoo Inc. 


FIGHTING YOUR CORNER 

Linux-based operating systems run on as many 
and probably more architectures than NetBSD, 
a fact that is not trumpeted that much across 
the market place. But just as we observed that 
stability is a decidedly unsexy element to sell an 
operating system, portability across 
architectures tends to be a minority concern. It 
is not that important to large transnationals or 
the individual consumer whether an OS runs for 
2 years or whether it is portable. 

Whether an operating system is secure seems 
to be far more important, but again, this is not 
necessarily a traditional engineering concern: it is 
perfectly possible to build excellent software that 
any 9 year-old would find ridiculously easy to 
break into, but it would still fulfil all requirements 
for a system that would be stable, portable, 
scalable and easy to use. Only the last 15 years 


have taught users the importance of security. The 
OpenBSD flavour caters to this concern, but 
despite many campaigns to educate users about 
the importance of inbuilt security, it seems 
difficult to convince middle-management of the 
value of BSD-based approaches. 


POSITIVE BSD 
It is time to provide solutions then. Linux-based 
operating systems have become the choice of 
many corporate server environments, happily 
running databases, clusters and grid 
installations. Where there are considerable gaps 
in the market is in environments where systems 
need to run unattended, or for a long time at 
the very least. Most systems that require such 
characteristics are likely to be either Solaris or 
another commercial Unix variant. 

But more importantly, there are applications 
that are specific to the BSDs. The Vinum volume 
manager for high-volume data storage springs 
to mind. The Packet Filter or pf is an application 
native to OpenBSD, which gave it one of the 
most powerful NAT and firewall engines. 
NetBSD’s pkgsrc is a package installation and 
configuration tool that enables installation from 
source or binary-only on several target 
architectures, In each case, the application is 
important enough to justify at least one - and in 
the case of Vinum - several servers using one of 
the BSDs. All previous applications have 
analogues on commercial Unices and on Linux, 
but it is likely that they cost a fairly large 
amount of money. 

Moreover, there are applications that even 
though they are not native to BSD might profit 
from BSD as an underlying operating system: if 
large groups of developers were to use a multi- 
user source code configuration management 
system like Bitkeeper or GNU Arch, the stability 
of FreeBSD would come in handy. | haven't 
even begun to delve into the iPv4/6 stack that 
achieved maturity ea 


r than any other IP 
stack in the industry. There is, of course, 
FreeBSD Linux binary compatibility that 
permits Linux developers to do both Unix and 
Linux development without having to pay too 
much attention to the differences between 
both kernels. 

Naturally, and perhaps surprisingly, the 
stability of the BSDs is guaranteed by a very clean 
and permanently available update mechanism 
that in the case of FreeBSD guarantees trouble- 
free patches regardless of the version of FreeBSD 
Tunning on the target system. 


AND DON'T USE POWERPOINT. 
WELL, MAYBE. 


It is perhaps not as easy to find arguments 
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against using a commercial Unix or Linux as it is 
to find arguments against using Windows. It pays 
in this case to try a positive approach and list 
advantages and technical data that show Return 
On Investment is more or less guaranteed. 
Fittingly, Linux and most BSD flavours share a 
problem today that even 5 or 6 years ago would 
not have been thought possible: all suffer from 
a glut of applications, from games to IDEs; it is a 
predicament that is recent and rather 
overwhelming to the unsuspecting corporate 
user, We might find it hard to complain, but if 
we want to be successful BSD advocates, an 
embarrassment of riches has to be distilled to a 
picture containing few strokes. Forming a 
distribution containing just a few strengths and 
applications unique to the BSDs might persuade 
IT managers, and purchasing autho 


corporations and governments. 


Key Links 


BSD advocacy 
advocacy.daemonnews.org/ 


FreeBSD 
www.freebsd.org 


The Vinum Volume Manager 
www.vinumvm.org 


OpenBSD FAQ 
www.openbsd.org/faq/pf/index.html 


NetBSD packages 
www.netbsd.org/Documentation/ 
software/packages.html 
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VOIP SOLUTION 


Sipphone Grandstream 


T-286 


Use VOIP without changing your phone. UK phone numbers are now available, 


making this VOIP solution computer independent 


Pros: Cheaper than hardware phones, online 
24/7, much more user friendly than software 
phones, free calls to VOIP friends, does not 
tie you to Sipphone.com service, also usable 
on LANs 


Cons: Difficult set up if you have a firewall 
and no DHCP server, requires at least a 256k 


broadband connection to be usable 


Price: US$79 


VP IP Py” 
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ipphone.com is selling hardware which 

hides the complexity of voice over IP to 

make the solution attractive for even non- 
technical users - it can be hard to set up, but 
daily use is easy. VOIP involves using IP networks 
to handie phone communications using either 
the SIP or H-263 protocols. While the latter 
protocol is more established, it does perform 
poorly on slow networks. 

Sipphone.com is a company based in San 
Diego, California, which as its name suggests 
offers VOIP services based on the SIP protocol. 
Started by Michael Robertson, the founder of 
both MP3.com and Linux distributor Lindows. 
com, the company offers software, hardware 
and phone services. 

On the software side, you can freely 
download X Ten for Windows or Phone GAIM 
under GNU/Linux. Both packages allow you to 
use your computer as a phone, with a built-in 
soundcard. However, speaking into a computer 
microphone and hearing your correspondent on 
the loudspeaker is not always convenient. 
Therefore Sipphone.com also offers hardware 
phones, which can be directly plugged into the 
network. Most VOIP hardware phones tend to 
be quite expensive and complicated, featuring 
far too many buttons. However, the HT-286 
now makes it possible to plug a standard phone 
into the network. It is basically plug and play: 


throw it onto your network, plug your phone in, 
dial and you're done. 

Like all software phones, these hardware 
phones depend on Sipphone.com phone 
services to go beyond VOIP and be usable in the 
real world. This means you can not only dial or 
receive calls from friends connected to the 
Internet and also using VOIP, but also any 
person in the world who can access a standard 
phone connected to a regular line. Sipphone. 
com makes this possible with an 
interconnection of its VOIP network and the 
standard phone network, routing calls back and 
forth as necessary. Such services are not 
provided for free, but the fees are very 
competitive. 

However, there are many services which are 
completely free; calls staying on the VOIP 
network are unlimited and free, which is ideal if 
you have friends on the other side of the world 
with broadband. Calls going over the standard 
phone network require pre-paid access. You can 
buy, for example, US$20 worth of phone 
minutes, after which any call made is billed to 
your online account. Calls can be made through 
the software or the hardware phone and there's 
no difference on the billing website. 

The HT-286 should be simple to get up and 
running - just plug in the network connection, 
standard phone and power. The HT-286 waits 


Reviews 


tion - Oper 


© Ee Eon View Netgaon Bookmarks Mail Window Help 


¢. 4. 


Back Rewind » In 


Product Model: HT236 


‘blank 


for a DHCP server to give it an IP address, and 
then tries to retrieve its latest firmware 
automatically from Sipphone.com. When it’s 
done, you visit a personal page to check 
everything is fine, buy minutes on the site, and 
then you can just use your phone to call VOIP 
numbers or standard phone numbers. 

Well, that’s the theory. When | plugged the 
device on my network, the first problem I had 
was the absence of a DHCP server. Using fixed 
IP addresses and without any need or desire to 
install a DHCP server, | still had to use one to 
give the device an IP address. | could then set a 
fixed IP address in the easy to use web interface. 
It was just a matter of opening the IP address of 
the HT-286 in any browser, typing the password 
and filling out the relevant fields. 

Browsing the configuration menu, | found 
that Sipphone.com services were optional. You 
can also use an alternative VOIP provider or 
your company SIP network and servers. Even 
better, | discovered that a virtual tunnel is used 
to offer services even through a firewall. This 
option can easily be configured on the web- 
based interface. 

After setup, | then tried to call test numbers. 
After the first unsuccessful tries, | realised | had 
to open a couple of ports on my firewall (S004 
and 5060). | was then able to make calls to US 
toll free numbers. These worked like a charm, 
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Easy to configure from any browser, the HT-286 plays well with a wide variety of VOIP software solutions 


even on my 128k broadband connection. 
However, additional attempts proved thata 
128k connection was just a little too slow. 
Audio was poor, and cuts were frequent. | was 
pleasantly surprised when five days later my 
phone started ringing. Friends from San. Diego 
had found my number on Sipphone.com 
yellow pages and were testing the connection. 
Although not exactly comfortable, the call was 
good enough to convince me to get a new, 
faster connection and start some local tests in 
the meantime. Calls to and from Linphone do 
work well, as long as you set up the Linphone 
port to match the Sipphone port. Otherwise, it 
doesn’t ring, or may only work in one direction. 
To call your phone, internet users have to 
dial sip:yournumber@proxy01 .sipphone.com, 
while intranet users can simply dial sip:yourip. 
if you have a fixed IP address, simply forward 
ports 69, 5004 and 5060 to your Sipphone IP 
and internet users will also be able to dial sip: 
yourip. Sipphone.com users share 1-747 US 
phone numbers. These are virtual phone 
numbers; you can call fellow Sipphone users, 
but you not be called by a standard phone 
unless you purchase a local phone number. 
Sipphone currently sells US and UK local phone 
numbers. If you have friends or clients in the 
US, this means you can easily associate a US 
phone number with your Sipphone in the UK. 


People in the US calling you will only pay fora 
US call, and you will only pay a monthly flat- 
rate for this local number. You can also of course 
order a local UK number, if you expect that 
Most of your incoming calls will come from the 
UK. You can purchase two numbers for one line; 
a US and a UK number for example. In any case, 
this will not change the casts of your outgoing 
calls, and you will still have to dial the 
international prefix to call anyone. 

This hardware device is seriously exciting. 
You can pick up your old phone and use it to 
cail anyone using any SIP‘client on the Intranet 
or Internet. You can also dial for free other ; 
VOIP phones (not only Sipphone clients, but 
also FWD, |PTel, Edgtel, laxtel, S|Pgate, 
Naturalvoice and StealthTele users), and toll , 
free numbers in the US and Germany. Service 
to the standard phone network is offered at a 
competitive price. If you have a significant 
other in say, Australia, and you both have DSL 
lines, this little device will let you call each 
other with normal phones, 24/7, easily and for 
free. What the HT-286 can do in other cases is 
only limited by your imagination. 


Guylhem Aznar , : 
Contact: bttp://sinphone.com/news/ 
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VERSION CONTROL. PACKAGE 


Subversion 1.1.0 


Highly usable successor to CVS which fixes many flaws in that rather ageing version control suite 


Pros: Decently interoperable, fixes filesystem ersion control, managing changes to all Until recently, CVS (Concurrent Version 
issues in CVS, highly flexible, excellent manner of material, is an essential part of | System) was by far the most widely used tool 
documentation nearly all open source projects of any for hardcore version control. And as CVS 
scale, Indeed, most of GNU/Linux would have became the standard, so there were fewer 
Cons: License may bug some coders been impossible to develop, code and co- choices for coders involved with collaborative 
ordinate without this defining and enabling projects. It was CVS or nothing. Programmers 
Price: Free software, Apache style license technology. And version control isn’t just for were forced to learn its rather arcane syntax in 
coders. Anyone making large numbers of an attempt to coax CVS into performing useful 


4 - 4 changes to a decently sized body of textual functions such as dealing with nested directory 
wer wer we material can benefit from the functionality. structures. But Subversion does seem to be 
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Version control with Subversion is definitely more flexible 
than other free software solutions, decently interoperating 
with a good range of protocols 


luring away a good few hackers, and for good 
reasons has now achieved the critical mass 
necessary to forge a new standard. Quite simply 
Subversion provides a better CVS, whilst 
keeping the original feel, interface and feature 
set. It can easily be defined as a successor to 
CVS. And Subversion does fix a good many 
flaws in that venerable package which have 
long bugged coders. 

The most tempting new feature of Subversion 
is that directories, renames, and file meta-data 
are all versioned for free. CVS always proved a 
major headache in this respect, enforcing a 
messy, constrained way of working. Subversion 
also throws in Apache2 interoperability, by way 
of the mod_dav_svn module, which provides for 
repository (as the tree of files is called) browsing 
and WebDAV support. Atomic commits are 
another neat feature, which make Subversion a 
more solid alternative to CVS. There are a raft of 
other improvements, mostly stemming from 
Subversion’s simpler client/server architecture 
and more integrated approach. 

As you'd expect from a toal which stresses 
collaboration and interoperability, packages are 
available for just about every GNU/Linux flavour 
and alternative OS under the Sun, from Debian 
and SUSE to Mac OS X and Windows. 
Installation should be easy enough under most 
systems with rpm or .deb packages provided. 
Under Gentoo older versions can easily be 
emerged, though it’s worth throwing the 
Apachez2 use flag into your make.conf if you 
want to run with WebDAV. Package and 
dependency-wise Subversion is not so 
lightweight as CVS, but in use it is faster under 
most actions and more flexible. The latest 
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Subversion can easily be installed from a source 
tarball, or, of course, a newly installed 
Subversion can be itself used to check out a 
working copy of the master sources. The syntax 
here is identical to that under CVS, with some 
changes to the ordering of commands. Either 
way, it’s a simple build. 

CVS users should have few problems getting 
to grips with this new tool, either setting up 
new repositories or simply working with coders 
on established projects. Of course it helps 
having free online access under the Creative 
Commons License to a well written O'Reilly 
text. Subversion operates under the same 
copy-modify-merge model as CVS, with user’s 
modifying their own working copy of a central 
repository which is then merged, with 
comments, with the new, final version. Version 
control packages assist with the merge, but 
coders are finally responsible for resolving 
conflicts. Most coders will work with 
Subversion, as with CVS, from the command- 
line, in this instance using the svn tool, but 
Subversion also throws in a range of 
monitoring and network access tools such as 
svnlook and svnserve. 

Working between remote repository and local 
copy is simple enough, with the usual CVS-style 
commands such as checkout, add, delete, 
move, commit and update. These commands 
are the bread and butter of version control, 
allowing for basic day-to-day operations. 
Checkout would be the first step if you weren't 
seeking to build your own repository. This 
command switch to svn creates the local copy 
for the first time, The checkout syntax allows for 
access via WebDAV, custom protocol or local 


disk, with SSL and SSH as options for remote 
work, The Update command is obviously used 
to sync your working copy to other’s changes. 
Commands such as add, delete, copy and move 


are self-explanatory, but Subversion usefully 
throws in a status command which allows you 
to examine in good detail all the changes 
you've made. This is certainly an improvement 
over all the guesswork involved with CVS. The 
diff command, under svn, shows changes in 
greater detail. Nearly all of these commands can 
be evoked offline, as Subversion maintains 
private caches of each versioned 


. Once 
changes have been made and merged, as with 
CVS, it’s simply a case of committing back to 
the central repository. 

If you’re used to the central concepts and 
methodologies of version control, Subversion is 
a breeze. Repositories are easily created using 
the svnadmin and svn import commands. It is 
suggested that three directories are created 
before the import, to facilitate advanced 
features such as branching and tagging. It’s also 
likely that if you're running a repository you'll 
want to take advantage of the Apache2 module 
provided. Setup is simple enough, with a few 
well documented changes to Apache directives, 
Authentication can alse be easily configured 
and customisation of directory displays can be 
attempted using XSLT stylesheets. Subversion 
really does pack in the features, offering a good 
range of connection options and great deal 
More flexibility than CVS, whilst retaining the 
easy working style of the older toolset. 


Martin Howse 
Contact: http://subversion.tigris.org 
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BACKUP SOLUTION 


Arkeia Server Backup 


Seriously robust backup package which now offers additional support for LDAP servers and 


MySQL hot backup under a new range of plugins 


Pros: Pleasant to configure and use, cuts 
down on complexity which is always a good 
thing when backing up, fast, robust and with 
good logging 

Cons: Costly, not as flexible as free 
alternatives such as Amanda, sparse and 
hard to find documentation 


Price: From 290 Euro 
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iven the complexity of most modern 

systems, it’s becoming increasingly 

difficult to throw tagether a solid, robust 
backup solution using core Unix tools such as tar, 
cron and bash. And though classic packages such 
as Amanda, coupled with a Webmin-based front- 
end are seriously powerful, such solutions can be 
difficult to install, configure and maintain 
without diving into rather weighty 
documentation. Arkeia have long presented a 
simple, GU!-based backup alternative which most 
novice sysadmins or small office setups should 
have little trouble in implementing. And though 
hardly a budget offering, it’s always worth 
mentioning that delaying backup because of 
imperfect technical or setup skills can end up 
being a really expensive option. 

Arkeia offers all the functionality you'd expect 
from a professional backup solution, with 
support for a good range of hardware, including 
DAT, DLT and 8mm drives. The backup and 
restore feature set is sufficiently versatile, suiting 
the more modest needs of most small businesses. 
Those looking to backup multiple hosts should 
investigate the more flexible Amanda. Arkeia 
allows solely for remote backup of a single server. 
However, Arkeia does throw a few highly usable 
features into the mix, with more expensive 
offerings providing for live LDAP backup and 
restore, online database backup and easy to use 


disaster recovery function 
Server Backup is supported on a good many 
GNU/Linux platforms, using both RPM packages 
or the more traditional tar approach. Sun’s JRE 
(Java Runtime Engine), above version 1.4, must 
be installed on the machine which will be doing 
the backups. This machine obviously requires 


both a suitable tape drive, and network access to 
the server to be backed up. With the JRE in place, 
installation of server and GUI is simple enough, 
with the few necessary steps well documented. 
After the usual runaround with paths for the JRE 
was fixed, however, the Arkeia GUI refused to 
start, with a complaint over the JRE version 
number. Arkeia requires an older version than the 
latest default specified by Sun. 

With Sun’s 1.4.03 [RE in place the Arkeia GUI 
launches, offering beth a help window and main 
configuration window. The handy Quick Start 
Guide bundled with Server Backup walks the 
new user through basic backup, and further 
documentation is available online. It’s worth 
mentioning that the Arkeia site is rather 
confusing when it comes down to identifying 
suitable material. 

The Arkeia interface is pleasant and 
reasonably intuitive, with one click access to 
monitoring, management and restore functions. 
Such icons are used to access wizard style 
configurations which walk the user through 
basic backup tasks and settings. The 
accompanying help window provides context- 
driven assistance for all selected tasks, and does 
offer a decent alternative to a written manual. 
Logs are also readily accessible. After detecting 
a tape drive, which was easily accomplished in 
the case of a HP SureStore DAT24, a manual 
interactive backup is easily accomplished. 

Arkeia offers a range of backup schemes which 
in most instances can be easily mixed and 
matched, Backups can be started manually at 
any time, at a deferred time specified in the 
future or repeated at time intervals. Such 
backups can be total, differential, which backs up 
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With online, context-driven help readily available and a decently intuitive interface, Arkeia takes much of 


the guesswork out of backup 


only selected files which have changed since the 
last total back up, or incremental which changes 
all and any files which have changed since the 
last backup. A simple manual test backup is easily 
achieved, by selecting files on the server, 


choosing the drive, labelling the disk and clicking 
a start button, Backup simply couldn’t be easier 
and a decent graphical monitoring window 
provides easy to read information concerning 
which files are being backed up and what kind of 
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speeds are being achieved. It’s certainly 
reassuring, providing a clear indication that 
valuable files are now safe on tape. 

Arkeia is solid, fast and reliable. Restore 
functionality works well, and usage is fairly 
intuitive. Advanced options, though not plentiful, 
do present some useful possibilities and it is 
totally easy to create scheduled interactive 
backups with decent logging. Backup suites 
should leave little room for mistakes, and Arkeia 
does excel in refusing to cloud the waters with 
too many distracting icons and functions. 

The supremely useful LDAP (Lightweight 
Directory Access Protocol) plugin is available at 
extra cost alongside a good range of hot backup 
modules which allow for live backup of open 
application data under most popular databases, 
such as MySQL and Oracle. These are certainly 
powerful features, but Arkeia does need to 
improve documentation and provide perhaps a 
more unified application structure. Some further 
flexibility could also be thrown in, given that a 
suitable GUI does exist which allows for 
supremely easy configuration and navigation. 


Martin Howse 
Contact: www.arkela.com 
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AUTHOR: DRU LAVIGNE 
PUBLISHER: O'REILLY 
ISBN: 0596006799 
PRICE: £17.50 
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Explorer's Guide 
To The Semantic 
Web 


EXPLORER'S GUIDE TO 


“SEMANTIC 
EB 


The Semantic Web is a Web which 
has meaning, which makes sense for 
software and users alike. In contrast 
to today’s Web which is primarily 
accessed by people, the Semantic 
Web, a set of extensions to the 
World Wide Web enabled by 
technologies such as OWL (Web 
Ontology Language) and RDF 
(Resource Description Framework), 
is more about machines taking an 
active role in how Web-based data is 
linked, accessed and processed for 
people. In this intelligently written 
work, author, Thomas B. Passin 
argues that though most people 
disagree as to the exact nature of 
the Semantic Web, many definitions 
share common themes such as 
annotation, intelligent software 
agents and the Web as database. 
And few would disagree, given the 
sheer size of the Net, that the 
Semantic Web is not only imminent, 
but also an extreme necessity. 
Explorer's Guide delves deep into 
both current technologies which 
extend the World Wide Web, such 
as RDF and RSS, and more 
conceptual issues which are based 
heavily around the work of Tim 
Berners Lee, key architect of our 
current Web. Berners Lee, working 
with the W3C, published what is 
known as the Semantic Web Layer 
Cake, detailing the core framework 
which could make up the Semantic 


Web. Building on XML, XML 
schema, a lanquage used to define 
the structure of specific XML 
languages, and RDF, a hierarchy of 
concepts such as Ontology, Logic 
and Trust is established. Pessin 
examines each of these topics in 
good detail, branching out into case 
studies and possible usage scenarios. 
The Semantic Web is an exciting 
place to be, and Pessin makes for an 
enthusiastic quide who certainly 
knows his stuff when it comes down 
to RDF and the like. Given the 
nature of his arguments and 
characteristics of the Semantic Web, 
it makes sense to provide a good 
many diagrams and example 
mappings of notions. Indeed, each 
chapter opens with what are 
described as mind maps, graphically 
describing the concerns which will 
be subsequently dissected, with 
plentiful XML and RDF examples to 
follow. Explorer’s Guide does tread a 
difficult path between abstract 
notions and contemporary 
technologies, and in most parts does 
succeed in linking both areas in a 
fascinating manner. Perhaps more in 
depth real-world case studies would 
have helped to round out an 
otherwise intriguing, essential work. 


Learning Red 
Hat Enterprise 
Linux & Fedora 
Ath Edition 


LINUX 


Books @ 


In the fast moving world of GNU/ 
Linux, it’s tough for publishers to 
keep up with point releases of 
major distros, let alone major 
changes to the organisation of core 
Linux efforts. When the Red Hat 
model changed radically, writers 
rushed to update now obsolete 
works, resulting in a flurry of 
Fedora-based works. And with the 
recent release of Fedora Core 2 it’s 
hard for publishers to play catch 
up. That said, this latest Learning 
Red Hat iteration does present 
enough reasonably generic material 
to be of use to those who have 
upgraded from Fedora Core 1. 
There have been few major 
changes over the previous release. 
Learning Red Hat styles itself as 
centring on the configuration and 
use of office productivity apps and 
development environments, though 
there does seem little evidence of 
the latter, except for a well-written 
chapter on shell scripting and usage. 
And the range of productivity apps 
is quite limited, focusing on the 
ubiquitous OpenOffice.org suite and 
Evolution. Much of the material is 
concemed with everyday use of a 
basic desktop environment, with 
most configuration achieved by way 
of Red Hat specific tools. Command 
line tools are covered, as they arise, 
and most network services such as 
Samba and Apache are dealt with 
through hand-edited configuration 
files. However, in such a slim 
volume, which in main covers 
installation issues, it’s unlikely that all 
but the most trivial networked needs 
will be addressed here. Given that 
Fedora’s contemporary installation 
routines are wonderfully simple, 
with context-driven help on hand, 
it's hard to recommend a title which 
offers little in the way of a fresh new 
approach to documentation. 


Wi-Foo 


AUTHORS: ANDREW A. VLADIMIROV ET AL. 


PUBLISHER; ADDISON-WESLEY 
ISBN: 0321202171 


PRICE: US$34,99 


Security focused titles do walk a fine 
line between providing useful 


information to protect networks and 
simply exposing flaws and 
vulnerabil 


ies to crackers. There’s no 
easy way out of the dilemma, and 
security through obscurity is 
certainly no solution. Given the well 
publicised issues associated with 
securing wireless networks, and the 
near ubiquity of Wi-Fi in large cities, 
any information which could assist 
in protecting wireless nets is surely a 
good thing. And the knowledgeable 
authors of this well-written guide are 
certainly keen to dispel the notion 
that such a work is targeted at 
would-be wireless thugs, despite the 
fact that appealing to the cracker- 
ethic certainly helps sales. Of course, 
a good part of the book is devoted 
to step by step explanations of more 
or less every 802.11 attack 
methodology known to man, but 
such information is extremely 
necessary for both auditing and 
defence work, and, given the 
density of information here, Wi-Foo 
offers no quick fix for crackers. Wi- 
Foo also demands a good degree of 
knowledge of basic wireless 
networking, TCP/IP and GNU/Linux 
or BSD systems. 

Wi-Foo deals with real wireless 
security issues out there in the big 
bad world, Attack methodologies 
make use of the full spectrum of 
primarily free software tools used for 
network discovery, encryption 
cracking and frame generation. With 
decent examples of the uses and 
abuses of such tools, an entire 
network breach is walked through in 
explicit detail from planning stages 
through attacks which range from 
simple WEP brute forcing right 
through to last resort DoS attacks. 
Rather unnecessary subsequent 


material provides an in depth guide 
to what the cracker may get upto 
once inside your network. This 
makes for unsettling reading for 
anyone faced with securing even 
small-scale wireless nets. Thankfully, 
a well sized chunk of this 
heavyweight work is devoted to 
defence issues, and an excellent 
chapter provides an essential 
introduction to applied 
cryptography. Rather than relying 
on a one size fits all approach to 
security, the authors stress a 


ered perspective, placing 
particular emphasis on the higher 
protocol layers. Defence 
methodologies such as mutually 
authenticated IPSec 
implementations, secure gateway 
deployment and SSH port 
forwarding are well explained. This 
approach makes perfect sense; 
nobody would argue against 
securing a network at all points. User 
authentication is thus also covered 
in good detail, with interesting 
dissections of technologies such as 
RADIUS and authentication using 
LDAP services. Freely available 
Intrusion Detection Systems (IDS) 
such as WIDZ are decently reviewed, 
rounding off a completely thorough, 
unmatched guide ta the current 
state of the wireless security field. 


Secure 
Architectures 
With OpenBSD 


AUTHORS: BRANDON PALMER ET AL. 


PUBLISHER: ADDISON-WESLEY 


PRICE: £26.99 


The Unix philosophy is heavily 
concerned with choosing the right 
tool for the job, and in the case of 
configuring a secure machine, for, 
say, intrusion detection, firewalling 
or Kerberos, there’s little doubt that 
OpenBSD makes for a perfect fit. It's 
stable, lightweight, specialised and 
offers a centralised development 
model which certainly has its 
benefits. OpenBSD is an essential 
remedy to the bloat which can 
make working with some GNU/ 


Linux distros so painful when 
seeking to perform quite specific 
tasks, Indeed, Secure Architectures is 
squarely aimed at those moving 
from other Unix-like OSes. Much is 
made throughout of the differences 
between OpenBSD and GNU/Linux 
in terms of, for example, filesystem 
layout or start-up scripts. A good 
degree of knowledge of both Unix 
and networking is also assumed, 
allowing the work to focus more on 
services, security and authentication. 

Secure Architectures digs deeply 
into the rich world of OpenBSD. 
Alongside overview material which 
covers the basics of package 
management using Ports and topics 
such as installation and filesystem 
use, you will find some seriously 
advanced material which does 
provide a good picture of what can 
be done with OpenBSD, The 
development environment, 
including tracing system calls, is well 
described, and services such as the 
Kerberos network authentication 
scheme and IPSec are presented 
with clear examples. The complete 
toolset is well covered, and, of 
course, the usual suspects such as 
Apache and OpenSSH all get a look 
in, However, in contrast to the other 
BSD title reviewed this issue, Secure 
Architectures suffers from poor 
organisation of material and the lack 
of a real-world slant to examples. All 
too often, a task-based approach is 
discarded in favour of a point-by- 
point dissection of a specific tool or 
script. Whilst useful to some degree 
for reference purposes, GNU/Linux 
users unacquainted with OpenBSD 
would perhaps favour a series of 
more task-focused, relaxed, step-by- 
step tutorials. 


a 
SECURE 
ARCHITECTURES 
WITH 
OpenBSD 


BRANDOW PALRER 
JOSE MAZARIO 
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website or php based application. A 


leaves plenty of room for your application 


Imagine, your boss wanted you to create a dynamic website, You got 
ng, everything works. Now, he wants you to show him 
s PC. You take your Lamppix CD, let it boot and show him 


everything off the CD! There’s no need to change anything on 
Best of all because your site is on a read-onty CD you can play with 
at much as yo nd all you have to do to get back to the original is 


to reboot. 
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Xandros is a KDE based Linux distribution designed purely for the desktop 
user and targeted at new users seeking a Windows replacement. 

Installation is very quick and painless with a four click install with 
automatic disk partitioning and automatic support for dual-boot 
installations with Windows XP. It aims to work right out of the bax and 
offers seamless file and print sharing on Windows and Linux networks. 

The Xandros desktop is clean and functional with a carefully selected 
group of applications included. Xandros does not inundate you with 
multiple applications that perform the same task, and they’ve improved a 
few to eliminate bugs. 

Whether you're at home, school, or at work you'll find just what you 
need to share files, write a report, surf the Internet, listen to music, play 
games, or do almost anything else. 

Users have full access to user forums, free software updates through 
Xandros Networks, and single-click access to a huge inventory of free 
Linux software. Web browsing and e-mail is provided by a Xandros-edition 
of Opera 7.50. 

We provide the best documentation in the industry. Our user forums 
are very helpful. In short, Xandros provides the most user friendly and 
functional Linux operating system and suite of software. 


© LAMPPIX 


e e e 

Lamppix - Mint 

As an example of ils power we have created a demo installation of 
Mambo, the award winning CMS (content management system) 

To try it oul just reboot your PC from the CD. Everything 1s pre- 
configured, so you can simply insert the CD, and watch as Linux boots 
and Firefox is started with Mambo running. Firefox is confiqured so that 
when it is closed the PC shuts down, so that the user doesn’t even have to 
know anything about linux to see your demo 
If you want to test with phpS instead of php4 start lamppix with lamppix 
php5 at the boot prampt 
README Jinuxuser] for simple 
web site to the CD. 


http://lamppix.tinowagner.com/ 
http://lamppix.tinowagner.com/phorum/ 


See [lamp ns to add yo 


Also on CD2 


Mambo 4.5.1 


Mambo is a full-featured content management system that can be used for 
everything from simple websites to complex corporate applications. Mambo 
is easy to install, simple to manage, and reliable. Written in PHP and using 
the MySQL database, Mambo can be hosted on Linux, Unix, Windows and 
Macintosh OS X servers - in fact as Jong as it runs PHP and MySQL, it can 
run Mambo, 

“Mambo is the perfect solution for developers and novice users alike who 
demand a simple yet elegant way to deploy professional websites rapidly. 

With this new release Mambo has taken several large steps to improve on 
an already award winning product.” (Best Open Source Software in the 
LinuxUser & Developer Awards 2004). 

New features include :- page caching, advanced mail options, dynamic 
site templates, trash manager, support for multiple menus, quick copy an 
existing content item and greater individual control of the display of an item 
through a highly configurable parameter facility, 

The Mambo Development Team focuses on building a solid application 
framework rather than on add-ons that are typically found in many portal 
solutions. The extensive API funtionality provided by Mambo keeps Mambo 
extremely lightweight and efficient, thus making it easier for anybody to 
extend Mambo through custom third party components and modules that 
directly serve the needs of a specific site. In the hands of a custom 
developer, this makes Mambo a powertul platform for a wide variety of 
Internet applications that go far above and beyond the simple creation 
of content, 

MamboForge.net has been established as a development and distribution 
environment for the community to further expand the Mambo project and 
currently hosts over 400 mambo third party components, templates and 
language transaltions. MamboForge is powered by GForge (an offshoot of 
SourceForge) and is now the second largest GForge Project site in the world. 


www.mamboserver.com/ 
www.mamboforge.net/ 
http://forums.mamboserver.com/ 
www.manibeserver.com/cat/Documentation/ 
Location on CD: /extras/mambo 


Arkeia Network Backup 5.2 


A proven, award-winning enterprise solution that provides fast and reliable 
data protection for business critical information. This heterogeneous 
network backup solution based on a Linux or Unix backup server supports 
hundreds of tape devices and can also perform backup to disk. Hot 
backup plug-ins for online backup of open database files such as Oracte, 
MySQL, LDAP, DB2, and Lotus are also included on the CD, 

The trial version of Arkeia Network Backup can support up to 10 client 
computers. If you would like to test the solution on your library or 
autoloader, complete the form at http://www.arkeia.com/demoform.html 
to get a demo license key. If you try Arkeia.Network Backup, Arkeia 
provides 30 days of FREE installation support! See more information at 
http://www.arkeia.com/ccpagefree.htmi. 


Cover Discs @ 


Arkeia Light is also included on this CD, a free version of Arkeia Network 
Backup. Based on the same engine, Arkeia Light supports one Linux 
backup server with a single tape drive and 2 desktop-class backed up 
computers (Linux, xBSD, Windows or Mac). 


http://www.arkeia.com/ 
Location on CD: /extras/arkeia 


Skype 


Skype uses P2P (peer-to-peer) technology to connect you to other users 
to talk and chat with your friends, 

The technology is extremely advanced but super simple to use... You'll 
be making free phone calls to your friends in no time! 


http://www.skype.com/ 
http://forum.skype.com/bb/ 
Location on CD: /extras/skype 


Firefox 0.9.3 


Latest version of the speedy, feature rich web browser 
www.mozilla.org/products/firefox/ 
hittp://forums.mozillazine.org/ 
Location on CD: /extras/firefox 


Scribus 1.2 


New version of the award winning Open Source Desktop Publishing 
application for Linux. 

With separation previews, advanced PDF 1.4, CMYK color separations 
and ICC colour management, Scribus brings professional DTP to Linux with 
a combination of “press-ready” output and new approaches to page layout. 


www. scribus.org.uk 
Location on CD: /extras/scribus 


User Guide to Using the 
Linux Desktop 


Published by the United Nations Development Programme's Asia-Pacific 


Development Information Programmer (UNDP-APDIP) 
This user guide is meant as an introductory guide for a new user 


running Linux. It assumes no prior PC or Linux knowledge. 
This manual is provide in both PDF and OpenOffice file formats and 
presentation slides for trainers are also provided, 


www.apdip.net 
Location on CD: /extras/luguide 


Plus 


Audacity 1.2.2 

Location on CD: /extras/audacity 
OpenSSL 

Location on CD: /extras/openssl 


LinuxUser & Develoner O97 


@ End piece 


The strange tale of the FBI, an imprisoned Russian programmer, Acrobat and the DMCA, 


as told by the Luddite 


Adobe | 


n July 2001, in scenes reminiscent of the 

Cold War, a 27-year-old Russian programmer 

and father of two, Dmitry Sklyarov, was 
arrested by the FBI, as he was preparing to 
depart from his hotel in Las Vegas after speaking 
at the DEF CON security conference. Sklyarov 
was arrested at the behest of the Adobe 
Corporation. His alleged crime was that he 
wrote software that contravened the 
controversial US Digital Millennium Copyright 
Act (DMCA), and faced a possible fine of 
US$500,000 or five years in a foreign jail for 
actions that were legal in his own country. 

One of Adobe’s more popular products is 
Acrobat, which is used to create and read 
documents in Adobe’s portable document 
format (PDF), which has become a standard for 
reproducing compatible documents across 
multiple platforms. Acrobat can be configured 
by publishers to create downloadable eBooks 
which can be encrypted and restricted for 
private use. Adobe’s dispute with ElcomSoft, the 


A software pirate 
might come to the 
same conclusions, but 
would not speak at a 
security conference 
and tell the world 


company that employed Sklyarov, is that the 
Russian company produced a package that was 
able to sidestep Adobe's encryption, and make 
copies of eBooks which could then be ported to 
computer systems that were not supported by 
Adobe's eBook Reader software. 

Sklyarov’s talk at DEF CON was on the 
subject of eBook security. He researched the 
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flaws in eBook encryption and notified the 
companies concerned, pointing out their 
weaknesses. In one instance, as reported by 
cryptography guru Bruce Schneier, the 
password was included in plain text in the 
executable and could be read with a simple text 
reader. Sklyarov considered Adobe's eBook 
encryption to be ineffectual and inadequate. A 
software pirate might come to the same 
conclusions, but would not speak at a security 
conference and tell the world. In any case, it 
was his employer, and not Sklyarov, who should 
have been brought to book. 

The balance of freedom and rights in 
copyright law is a fraught subject, and 
computer technology has changed many of the 
boundaries. When a user purchases a product, 
he or she buys rights to the product, and these 
rights vary according to the product. Software is 
not a singular work of art, but the culmination 
of the input of thousands of disparate 
individuals from academic and research 
institutions, as well as commerical organisations. 
lf you buy a modern proprietary software 
package, you cannot lend, sell or give away the 
package when it is of no more use to you. And 
you cannot install the software on your second 
computer so that your child can do his or her 
homework. Such restrictions change the 
definition of fair use. 

The DMCA is an extension of the privileges of 
software licensing into criminal law, and 
contains provisions which are considered by 
many to be anti-privacy and anti-security. The 
law protects the interests of the software 
companies by preventing reverse engineering, 
but has no counter-balances for fair use or to 
protect users from monopolistic practices. 

The DMCA works for the protection of the 
large software companies and against the 
disclosure of bad practice, but does little for the 
wider IT industry or the public. 


n Wonderland 


Adobe withdrew the charges after pressure 
from the Electronic Frontier Foundation. In 
December 2001, Dmitry Sklyarov was allowed 
to return to Russia. In December 2002, the case 
against Elcomsoft was dismissed by a jury. But 
the DMCA is atill in force, and many software 
engineers, including Alan Cox, refuse to visit the 
United States until the act is repealed. 

Among the titles Adobe gave away to 
promote its eBook range is ‘Alice’s Adventures in 
Wonderland’, a book that is long out of 
copyright, and can be downloaded free, with 
Tenniel’s original illustrations, courtesy of Project 
Gutenberg. The licence for the first Adobe 
edition did not allow the user to copy, print, 
lend or give away all or part of the text, and 
asserted: “This book cannot be read aloud”. 

When questioned, Adobe maintained with 
tortuous logic that each of these restrictions 
meant something slightly different to what you 
might expect. As Larry Lessig pointed out in an 
article for the ‘Industry Standard’, “a plain 
reading of the permissions makes it sound as if 
the firm is trying to control, in addition to 
everything else, whether parents may read a 
children’s story to their own children. And that 
control struck most (though, in the company | 
keep, not all) as absurd”. Adobe said that this 
permission referred to a voice function within 
the eBook Reader, and nothing else. Later 
editions now state that the book “can be read 
aloud”, although the voice function still does 
not work. 


“Then you should say what you mean,” the March 
Hare went on. 

“| do,” Alice hastily replied; “at least - at least | 
mean what | say - that’s the same thing you 
know.” 

“Not the same thing a bit!” said the Hatter. “Why, 
you might just as well say that ‘I see what | eat’ is 
the same thing as ‘I eat what | see’” 


-.. make sure you choose the right partner 


with real experience through the pioneering years, our consultants, resellers 
and engineers make your transition out of the licence trap a revelation. 


ITS Linux 


the uk’s premier vendor for Linux IT solutions 


as voted for by Linux User & Developer magazine 
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See Macromedia® ColdFusion® MX in a whole new light. 


Copyright © 2003 Macromedia, Inc, All rights reserved. Macromedia, 
the Macromedia logo, ColdFusion, Flash and Macromedia Flash and 
are trademarks or registered trademarks of Macromedia, Inc. in the 
United States and/or other countries, Third-party marks are the 
properties of their respective owners, 


See for yourself. With the new 
ColdFusion MX 6.1, you can quickly 
build the new wave of Rich Internet 
Applications. Increase productivity with 
rapid server scripting and the powerful 
Macromedia MX 2004 development 
tools. Incorporate XML and web services 
with ease. Scale with a dependable 
Java™ architecture and deliver rich 
user interfaces with native connectivity 
to Macromedia Flash” You can 

even run your applications on 

leading application servers like 

IBM® WebSphere® and Sun® ONE. 


Try ColdFusion MX today and see 
what you can do now. 


Order your copy of ColdFusion MX 
today, call Macromedia Direct on 
01344 458622 or email: 
uksales@macromedia.com 


www.macromedia.com/uk 


